Journeyman Information Security Analyst

Chameleon Integrated Services

5d • Remote

About The Position

We are a growing information technology company that offers its employees a culture of success, the chance to work on revolutionary federal IT infrastructure, and the opportunity to grow alongside cutting-edge technology that is reshaping the industry. We are seeking forward thinking candidates that have strong experience in operational support and can help take to the next level in a pro-active stance.

Chameleon Integrated Services has expertise in operations management, quality systems, data operations and cybersecurity. We secure some of the most sensitive data for the Department of Defense and for other U.S. federal government agencies. We are known for the great care we take with clients and employees, and we believe in promoting from within.

Chameleon Integrated Services is currently looking for a remote, Journeyman Information Security Analyst to support one of our federal clients in a high-visibility federal cybersecurity ad compliance program.

Due to federal contract requirements, this position requires U.S. citizenship. Lawful permanent residents (green card holders) and individuals requiring visa sponsorship are not eligible for this role.

This position is contingent upon the successful award of a contract and subsequent funding.

Overview:

The Journeyman Information Security Analyst will conduct hands-on NIST SP 800-53 security control assessments in support of federal FISMA and RMF requirements. This role is assessment-heavy and includes discovery, control testing, evidence review, stakeholder interviews, vulnerability analysis, and production of audit-defensible documentation packages.

The ideal candidate has direct experience producing SAPs, SSPs, SARs, SCTMs, and POA&Ms in federal enterprise environments.

Requirements

• NIST SP 800-53 security control testing and validation
• Development of SAPs, SSPs, SARs, and POA&Ms
• Evidence collection and documentation review
• Risk identification and findings development
• FISMA and RMF compliance processes
• 5–8 years of information security or cyber risk management experience
• Minimum 3 years of hands-on federal or enterprise security assessment experience
• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field
• Security+ CE required
• Public Trust (or ability to obtain)
• Due to federal contract requirements, this position requires U.S. citizenship. Lawful permanent residents (green card holders) and individuals requiring visa sponsorship are not eligible for this role.
• This position is contingent upon the successful award of a contract and subsequent funding.

Nice To Haves

• FedRAMP and cloud assessment familiarity
• Experience with GRC tools such as ServiceNow, Qmulos, Archer, or eMASS
• Ability to manage multiple concurrent assessments
• CISSP, CISM, CISA, CAP, CEH, GIAC, or SSCP preferred

Responsibilities

• Conduct security control assessments
• Review and validate system documentation
• Perform risk and vulnerability analysis
• Draft and update assessment deliverables
• Support documentation package finalization
• Coordinate with system owners and stakeholders

Benefits

• Competitive Employee Health Insurance options including dental
• 100% company paid vision plan
• 401K plan with generous company match and no vesting period
• 100% company paid life insurance
• 100% company paid long and short-term disability insurance
• Training allowance
• PTO and more

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level