Information Security Analyst

IMPORTANT NOTICE – INCUMBENT-ONLY POSITION
This position is only open to current employees supporting the FOMSS II Contract.  Applications from individuals who are not currently incumbents on this contract will not be considered.

Information Security Analyst 

An Information Security Analyst is responsible for protecting information systems, networks, applications, and Operational Technology (OT) environments from cybersecurity threats. The position supports security compliance, risk management, vulnerability management, incident response, security assessments, and implementation of cybersecurity controls in accordance with federal and organizational requirements.

Key Responsibilities:

· Monitor and assess information systems for cybersecurity risks, vulnerabilities, and potential security incidents.

· Implement, assess, and maintain security controls in accordance with NIST, FISMA, RMF, and federal cybersecurity requirements.

· Support the development and maintenance of System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and other security documentation.

· Work with Information System Security Officers (ISSOs), Information System Security Engineers (ISSEs), system administrators, engineers, and management to address security requirements.