Description

Information Security Analyst III - Q Clearance Required

Summary:
We are seeking an experienced Information Security Analyst III to support the security, assessment, authorization, and continuous monitoring of government systems and information assets. The ideal candidate will have strong knowledge of federal cybersecurity requirements, Security Assessment and Authorization (SA&A), NIST security frameworks, vulnerability management, incident response, cloud security, Continuous Diagnostics and Mitigation (CDM), Continuous Monitoring, and Zero Trust Architecture. This position will work closely with end users and technical teams to identify security requirements, implement security policies and procedures, protect information systems from unauthorized access or modification, and monitor organizational compliance.

Location:
Washington, DC or Gaithersburg, MD

Salary:
Up to $140,000 depending on qualifications, including relevant certifications, education, years of experience, and demonstrated experience supporting Federal Government programs within the field. Candidates with specialized expertise, industry-recognized certifications, and strong Federal contracting experience may be considered at the higher end of the range.

Clearance:
Active Q Clearance Required

Education:
Bachelor's degree from an accredited university or college in Cybersecurity, Information Assurance, Information Technology, Computer Science, or a related field.

Required Certification:
One or more of the following certifications or equivalent:

• GIAC Information Security Professional (GISP)
• ISC2 Certified Information Systems Security Professional (CISSP)
• GIAC Security Essentials (GSEC)

Experience:

• Minimum of four (4) years of experience performing cybersecurity tasks designed to protect government systems and information assets.
• Experience protecting systems and information from unauthorized access, modification, disclosure, or destruction.
• Experience working with end users to determine departmental security needs and requirements.
• Experience implementing cybersecurity policies, procedures, and controls.
• Experience tracking and supporting organizational compliance with security requirements.
• Knowledge of Security Assessment and Authorization (SA&A) policies, procedures, and processes.
• Knowledge of NIST SP 800-37, NIST SP 800-53, CNSSI, and other applicable federal cybersecurity requirements.
• Understanding of Continuous Diagnostics and Mitigation (CDM) and Continuous Monitoring.
• Understanding of Zero Trust Architecture and security principles.
• Experience with cloud security concepts and technologies.
• Knowledge of incident response processes and procedures.
• Experience with vulnerability management, including identifying, assessing, tracking, and remediating vulnerabilities.
• Strong understanding of federal cybersecurity policies, standards, and security best practices.

Preferred Certifications:

• Certified Information Security Manager (CISM)
• GIAC Security Essentials (GSEC)
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Vulnerability Assessor (GCVA)
• GIAC Cloud Security Automation (GCSA)
• GIAC Cloud Penetration Tester (GCPN)
• ISC2 Certified Cloud Security Professional (CCSP)
• CompTIA Security+
• CompTIA CySA+
• CompTIA Security Analytics Professional (CySA+) or equivalent
• Certified Cloud Security Professional or equivalent cloud security certification
• Certified Ethical Hacker (CEH)
• ISACA Certified in Risk and Information Systems Control (CRISC)
• Certified Authorization Professional (CAP)
• ISC2 Certified in Cybersecurity (CC)

********Direct Applicants, only. No Agencies, No third-party recruiters, please********