Information Security Analyst at BlueWater Federal Solutions in US-MD-Germantown

Job description

• BlueWater Federal is looking for an Information Security Analyst to support the DOE EHSS Application, Infrastructure, and Cybersecurity Support (AICS) program
• AICS enables secure, reliable, and data-driven operations across the DOE enterprise through application modernization, DevSecOps, Zero Trust implementation, continuous monitoring, and infrastructure sustainment supporting EHSS’s environment, health, safety, security, and classification missions.

Responsibilities

• Implement and test safeguards protecting confidentiality, integrity, and availability of DOE EHSS systems and data.
• Support SA&A using NIST SP 800-37/800-53, CNSSI, DOE requirements, DISA STIGs, CIS Benchmarks, and approved tools.
• Document test results, recommend corrective actions, residual risks, risk assessments, and POA&M updates.
• Develop and maintain cybersecurity plans, SSPs, COOP/contingency plans, test plans, and authorization evidence.
• Analyze scans, track remediation, support annual reviews, and coordinate evidence with owners, administrators, and developers.
• Support CDM, Zero Trust, cloud assessments, incident response, vulnerability management, policy updates, SCRM reviews, and data calls.

Requirements

• Bachelor's degree in IT with emphasis in Cybersecurity or Information Assurance, or similar degree. 6 years of experience can be substituted for the bachelor’s degree (included as part of the experience requirement, not additional).
• Must have an active Top Secret clearance with the ability to obtain a Q clearance.
• Minimum 2 years completing tasks that secure organizational systems and information assets.
• Experience implementing measures protecting confidentiality, integrity, and availability.
• Knowledge of SA&A, NIST SP 800-37/800-53, CNSSI, CDM, Zero Trust, cloud, incident response, vulnerability management, and risk
• GISP, CISSP, GSEC, or equivalent required.

Skills

Required

• SA&A
• NIST SP 800-37/800-53
• CNSSI
• CDM
• Zero Trust
• cloud
• incident response
• vulnerability management
• risk
• GISP, CISSP, GSEC, or equivalent

Benefits

• We offer a competitive health and wellness benefits package, including medical, dental, and vision coverage. Our competitive compensation package includes generous 401k matching, employee stock purchase program, and life insurance options, and time off with pay. Salary range: 150-175K