Information Security Analyst

Scientific Research Corporation • Huntsville, AL

18h

About The Position

Scientific Research Corporation (SRC) is seeking a Security Analyst to support IT infrastructure security, compliance assurance, and audit remediation for United States Space Command (USSPACECOM) Redstone Transition Team projects. The analyst will assess prior inspection and department-level audit findings for applicability to headquarters transition, command and control facility, data center, and supporting infrastructure projects. In coordination with government security officials, project managers and engineers, cybersecurity personnel, and installation organizations, the analyst will translate findings into actionable requirements and help incorporate corrective measures into project planning, design, implementation, and acceptance.

The position bridges technical and organizational boundaries, addressing the relationships among C4IT infrastructure, cybersecurity implementation, physical security, and facility-related control systems. The analyst will provide clear assessments, practical recommendations, and documented evidence to inform government decisions, demonstrate readiness, and help prevent previously identified deficiencies from recurring. Responsibilities include reviewing inspection and audit materials, maintaining traceability of findings and corrective actions, coordinating implementation and verification, supporting inspections and audit responses, and preparing assessment reports and executive summaries.

Filling this position is contingent upon funding. The role requires U.S. citizenship and a U.S. government security clearance at the Secret level with Top Secret/SCI eligibility. Travel is up to 15 percent.

Requirements

• At least five years of relevant experience supporting DoD or federal IT security, infrastructure compliance, security assessments, or audit remediation.
• Experience interpreting inspection or audit findings and translating them into actionable technical or procedural requirements.
• Experience developing corrective action plans, tracking remediation, and assembling evidence to support closure.
• Working knowledge of cybersecurity controls, physical security considerations, and their application to enterprise IT infrastructure.
• Ability to review technical documentation, system inventories, diagrams, implementation records, policies, and procedures to identify gaps and inconsistencies.
• Experience coordinating corrective actions across technical teams, security personnel, facility organizations, and government stakeholders.
• Ability to assess whether proposed corrective measures address the underlying deficiency and define how implementation will be verified.
• Strong analytical, technical writing, reporting, and stakeholder coordination skills.
• Ability to manage multiple concurrent efforts and maintain traceability among findings, requirements, actions, and supporting evidence.
• U.S. citizenship.
• U.S. government security clearance at the Secret level with Top Secret/SCI eligibility.

Nice To Haves

• Experience supporting department-level inspections or audits involving C4IT infrastructure, cybersecurity, or physical security.
• Experience applying lessons learned from existing facilities to new construction, modernization, or headquarters transition projects.
• Familiarity with facility-related control systems and operational technology, including building automation, environmental monitoring, utility monitoring, and uninterruptible power systems.
• Familiarity with Risk Management Framework documentation, security control implementation evidence, configuration management, and continuous monitoring practices.
• Experience reviewing facility designs, network diagrams, equipment inventories, and construction or installation documentation.
• Experience coordinating with installation public works, communications and IT service organizations, construction contractors, or the U.S. Army Corps of Engineers.
• Experience participating in change control boards and evaluating security impacts of engineering or infrastructure changes.
• Experience with Microsoft Teams, SharePoint, Excel, and tools supporting compliance tracking, dashboards, and workflow management.
• Relevant cybersecurity, information assurance, physical security, or audit certifications.
• Bachelor’s degree in cybersecurity, information technology, engineering, security management, or a related field.

Responsibilities

• Review inspection reports, external audit findings, assessment checklists, and supporting evidence to identify deficiencies, underlying causes, and implications for current projects.
• Determine whether findings from existing USSPACECOM facilities apply to new or transitioning facilities at Redstone Arsenal.
• Translate applicable findings and mitigation recommendations into measurable security requirements, corrective actions, and acceptance criteria.
• Maintain traceability among findings, affected systems, project requirements, responsible owners, corrective actions, and verification evidence.
• Review cybersecurity implementation documentation, policies, procedures, guidelines, equipment records, and compliance artifacts for completeness and consistency.
• Identify gaps between documented requirements, planned designs, implemented controls, and operational practices.
• Coordinate with project engineers to incorporate security requirements into designs, statements of work, installation plans, test procedures, and project milestones.
• Assess interfaces among IT infrastructure, physical security measures, and facility-related control systems, including environmental monitoring, building controls, power protection, and utility monitoring.
• Coordinate with government cybersecurity and facility personnel to identify system boundaries, ownership, connectivity, access controls, monitoring responsibilities, and supporting documentation.
• Work with the Directorate of Public Works, installation communications and IT organizations, construction teams, and other supporting activities to resolve requirements and implementation dependencies.
• Develop and maintain corrective action plans and plans of action and milestones, including priorities, owners, schedules, dependencies, and closure criteria.
• Evaluate proposed mitigations for effectiveness and identify residual risks requiring government review or acceptance.
• Support site reviews, inspections, and verification activities to confirm corrective measures are implemented and supported by adequate evidence.
• Participate in change control boards to assess security and compliance impacts of proposed changes and track resulting actions.
• Coordinate with command and supporting organizations to resolve conflicting interpretations, clarify responsibilities, and obtain authoritative decisions.
• Prepare detailed assessment reports and executive summaries describing findings, project impacts, recommended actions, and decisions required.
• Maintain organized, appropriately protected repositories of inspection records, requirements, decisions, corrective actions, and verification evidence.
• Identify recurring deficiencies and recommend improvements to checklists, procedures, design reviews, and project acceptance practices.
• Support government-led inspection preparation, audit responses, and related security assurance activities.

Benefits

• Medical, dental, and vision plans.
• 401(k) with a company match.
• Life insurance.
• Vacation and sick paid time off accruals, with amounts increasing based on role and years of service.
• 11 paid holidays.
• Tuition reimbursement.
• A work environment that encourages excellence.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed