Junior Security Analyst

The Cadmus Group, Inc.•,

2d•$75,000 - $95,000

About The Position

This Junior Security Analyst role will have client facing responsibilities that encompass security analyst, engineering, and operations skill sets. Responsibilities include ensuring security and FISMA compliance of Cadmus’s client’s systems that are currently in the cloud. At various times, the successful candidate will perform security analyst tasks, such as analysis of security control implementation and assessment findings, development, and maintenance of security program documentation as well as more technical and operations tasks such as security testing and vulnerability scanning, security systems operation, and assisting with remediation of findings.

Requirements

1-2 years of IT security experience including work with the following:
JIRA
Confluence
Burp Suite or equivalent Dynamic Analysis Security Testing tool
Snyk or equivalent Static Analysis Security Testing and Dependency Management tool
Amazon Web Services (AWS) - Cloud Computing Security Services
Monitor security events and alerts using SIEM platforms like Splunk
Scaled Agile Framework (SAFe)
DevSecOps Framework and mindset
GitHub
Windows Server
Linux (Amazon Linux, RedHat preferred)
NIST SP 800-37 Rev.2 Risk Management Framework and associated NIST Special Publications (NIST SP 800-53 Rev. 5, etc.)
Federal Information Processing Standards (FIPS)
Other Federal Government Security Standards, Guidelines, Baselines, and Memoranda
Bachelor’s degree in computer science, Information Technology, or a related field (or equivalent practical experience)
1–2 years of experience in Security Analysis work
Excellent Technical Writing skills
Experience working directly with clients.
Ability to work autonomously and consistently deliver within deadlines.
Experience with creating and maintaining detailed documentation.
Excellent oral and written communication skills
Excellent multitasking skills
Security+, or equivalent security certification

Responsibilities

Development and maintenance of security program documentation (security policies, procedures, standards, etc.)
Business Continuity and Disaster Recovery Planning and Testing
Analysis of security testing findings, control implementations, and resultant security documentation updates (Plan of Action and Milestones, System Security Plans, etc.)