Information Security Analyst

SkyePoint Decisions•Springfield, VA

2d•Hybrid

About The Position

SkyePoint Decisions is seeking an Information Security Analyst to support a Department of State cybersecurity program. The Information Security Analyst will assist in protecting enterprise systems, networks, and data by implementing security controls, conducting risk assessments, monitoring compliance, and supporting cybersecurity operations across classified and unclassified environments. The successful candidate will have experience with federal cybersecurity frameworks, security control implementation, compliance monitoring, vulnerability management, and Risk Management Framework (RMF) processes. This position requires the ability to work closely with government stakeholders, technical teams, and cybersecurity leadership. This location of this position is still TBD but expected to be in a DOS office. Hybrid work will be allowed.

Requirements

Minimum 5 years of cybersecurity or information security experience supporting federal government, intelligence community, or Department of Defense environments.
Active Top Secret/Sensitive Compartmented Information (TS/SCI) Clearance.
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field (or equivalent combination of education and experience).
Current CompTIA Security+ certification or equivalent DoD 8570/8140 IAT Level II certification.
Experience working with: NIST SP 800-53 Security Controls
Experience working with: Risk Management Framework (RMF)
Experience working with: Security Control Assessments
Experience working with: Vulnerability Management
Experience working with: Continuous Monitoring Programs
Experience working with: FedRAMP Compliance
Experience working with: Security Authorization Processes
Experience preparing and managing compliance and security documentation.
Strong analytical, problem-solving, and communication skills.
Must be a U.S. Citizen.

Nice To Haves

Certified Information Systems Security Professional (CISSP) certification.
Certified ScrumMaster (CSM) certification.
Experience supporting Department of State cybersecurity programs.
Experience with cloud security and FedRAMP-authorized cloud environments.
Familiarity with security information and event management (SIEM) solutions, vulnerability management tools, and cybersecurity monitoring platforms.
Experience supporting classified systems and sensitive government environments.

Responsibilities

Support the implementation and monitoring of cybersecurity controls in accordance with NIST SP 800-53, Department of State policies, and federal security requirements.
Assist with Risk Management Framework (RMF) activities, including security control implementation, assessment, authorization, and continuous monitoring.
Conduct security assessments, compliance reviews, and risk analyses for information systems and applications.
Monitor system security posture and identify vulnerabilities, threats, and compliance gaps.
Assist in developing and maintaining cybersecurity documentation.
Support security control lifecycle management from implementation through ongoing assessment and remediation.
Analyze vulnerability scan results and coordinate remediation efforts with system administrators and engineering teams.
Ensure compliance with FedRAMP, FISMA, and Department of State cybersecurity requirements.
Participate in incident response activities, investigations, and forensic support efforts as required.
Generate security metrics, status reports, and compliance dashboards for management review.
Support internal and external audits, inspections, and authorization activities.
Research emerging threats and recommend improvements to enhance organizational security posture.

Benefits

Certification incentive program
PTO
Floating federal holiday options
Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs]
Flex Spending Accounts [FSAs]
Full Dental Plans
Vision
ST/LT Disability
Life Insurance
401k matched