Cyber Security Consultant

Infosys; Rockville (MD); On-site; USD 119,000 - 221,000; Full time

Benefits offered by this job

Medical/Dental/Vision Insurance

401(k) plan

Paid holidays and PTO

Job summary

Infosys Public Services seeks a Cyber Security Analyst to join our team in Rockville, MD. Focus areas include GRC, RMF, SA&A, and ATO activities for federal and state government environments, developing SSPs, SAPs, and security documentation to support FISMA and NIST controls.

The role requires 11+ years in cybersecurity within regulated sectors, strong RMF/FISMA expertise, cloud security experience, and relevant certifications. Bachelor's degree is required.

Qualifications

• Minimum 11 years of cybersecurity experience in government/regulated environments.
• Strong experience with RMF, FISMA, SA&A, and ATO processes.
• Experience with NIST 800-53/800-171, IRS1075, CJIS, CMS MARS-E, HIPAA/HITECH, FedRAMP.
• Experience developing SSPs, SAPs, SARs, POA&Ms, risk assessments, and artifacts.
• Cloud security experience across government cloud environments (Azure/AWS).
• Experience applying Zero Trust principles across identity, devices, network, and data.
• Experience with IAM architecture and access governance.
• Experience with SIEM/SOC operations, monitoring, incident management.
• Experience coordinating vulnerabilities, POA&M tracking, and remediation.
• Familiarity with privacy assessments for sensitive government data.

Responsibilities

• Assess security posture and conduct risk assessments for government environments.
• Develop and assess security controls and authorization artifacts.
• Support remediation and authorization activities aligned with FISMA and NIST.
• Collaborate with system owners, ISSOs/ISSMs, auditors, and delivery teams to ensure security requirements are met.

Skills

RMF

FISMA

GRC

IAM

Zero Trust

Cloud Security

Vulnerability Mgmt

Incident Mgmt

Stakeholder Mgmt

Security Operations

Education

Bachelor's degree

Tools

Azure

AWS

SIEM

Job description

Infosys Public Services is seeking a Cyber Security Analyst to join our team.

Summary

Cyber Security Consultant with strong expertise in Governance, Risk and Compliance (GRC), NIST Risk Management Framework (RMF), Security Assessment and Authorization (SA&A), and Authorization to Operate (ATO) activities within U.S. federal, state, and local government environments. The consultant will assess security posture, conduct security and risk assessments, identify compliance gaps, develop and assess security controls, and support remediation and authorization activities aligned with FISMA, NIST SP 800-53, NIST SP 800-37, NIST SP 800-171, FedRAMP, CMMC, and applicable government security and privacy requirements. These frameworks are commonly used across federal agencies, federal systems, cloud services, and government contractors. The role will support creating ATO packages artefacts including - System Security Plans (SSP), Security Procedures, Security design artefacts, security risk assessments, Plans of Action and Milestones (POA&M. The consultant will collaborate with system owners, ISSOs, ISSMs, security architects, cloud and infrastructure teams, auditors/assessors, and government stakeholders to ensure security requirements are effectively implemented and maintained throughout the system lifecycle.

Key Responsibilities

Minimum 11 years of cybersecurity experience, with demonstrated experience supporting U.S. federal, state, local government, or regulated public-sector environments. Strong experience with NIST RMF, FISMA, Security Assessment and Authorization, ATO processes, NIST SP 800-53, NIST SP 800-171, IRS1075, CJIS, CMS MARS-E, HIPAA/HITECH, FedRAMP, security risk assessments, GRC, cloud security, Zero Trust, vulnerability management, security operations, and incident management. NIST describes RMF as encompassing preparation, categorization, control selection, implementation, assessment, authorization, and continuous monitoring.

Required Skills

• NIST RMF & ATO: Experience supporting RMF lifecycle activities, security authorization, control assessment, authorization packages, and continuous monitoring.
• FISMA & Federal Compliance: Strong understanding of FISMA and associated NIST standards applicable to federal information systems.
• Security Control Implementation & Assessments: Experience implementing, assessing technical, operational, and management controls related to NIST 800-53, IRS1075, FISMA/FEDRAMP and documenting control effectiveness and deficiencies.
• Security Documentation: Experience developing SSPs, SAPs, SARs, POA&Ms, risk assessments, control implementation documents, and authorization artifacts.
• Cloud Security: Experience assessing security configurations and controls across Microsoft Azure, AWS, or other government cloud environments.
• Zero Trust: Experience applying Zero Trust principles across identity, endpoint, network, application, workload, and data security.
• Identity & Access Management (IAM): Experience with Architecture and implementation of IAM solutions, access governance.
• Security Operations: Experience with SIEM/SOAR SOC operations, security monitoring, threat detection, endpoint security, and operational security controls.
• Incident Management: Experience supporting incident triage, investigation, containment, remediation, recovery, reporting, and lessons learned.
• Vulnerability Management: Experience evaluating vulnerabilities, prioritizing risk, coordinating remediation, and maintaining vulnerability and POA&M tracking.
• Continuous Monitoring: Experience supporting ongoing security control monitoring, vulnerability assessment, configuration compliance, and risk reporting.
• Security Architecture: Ability to evaluate cloud, infrastructure, network, application, identity, and data architectures against government security requirements.
• Privacy & Data Protection: Experience supporting privacy assessments and security controls for sensitive government information, PII, and regulated data.
• Stakeholder Management: Ability to collaborate effectively with government stakeholders, System Owners, ISSOs, ISSMs, Authorizing Officials, assessors, auditors, and technical delivery teams.
• Candidate must possess atleast 1 of the certifications - CISSP, CISM, CISA, CRISC, CCSP, GIAC,
• Microsoft Azure Security, or equivalent industry certifications are highly desirable.

Educational Requirements

A Bachelor’s degree or foreign equivalent is required from an accredited institution. Will consider three years of progressive, relevant work experience instead of every year of education. Candidates who have completed a Master's degree program are strongly preferred.

The job entails sitting and working at a computer for extended periods. Should be able to communicate by telephone, email, or face-to-face. Travel may be required as per the job requirements.

The estimated annual compensation range for this role will be as follows:

In Rockville ,MD: $118,776, to $221,065.

Benefits

Along with competitive pay, as a full-time Infosys employee you are also eligible for the following benefits:

• Medical/Dental/Vision/Life Insurance
• Long-term/Short-term Disability
• Health and Dependent Care Reimbursement Accounts
• Insurance (Accident, Critical Illness , Hospital Indemnity, Legal)
• 401(k) plan and contributions dependent on salary level
• Paid holidays plus Paid Time Off

About Us

Infosys is a global leader in next-generation digital services and consulting. We enable clients in more than 50 countries to navigate their digital transformation. With over four decades of experience in managing the systems and workings of global enterprises, we expertly steer our clients through their digital journey. We do it by enabling the enterprise with an AI-powered core that helps prioritize the execution of change. We also empower the business with agile digital at scale to deliver unprecedented levels of performance and customer delight. Our always-on learning agenda drives their continuous improvement through building and transferring digital skills, expertise, and ideas from our innovation ecosystem.

EEO

Infosys provides equal employment opportunities to applicants and employees without regard to race; color; sex; gender identity; sexual orientation; religious practices and observances; national origin; pregnancy, childbirth, or related medical conditions; status as a protected veteran or spouse/family member of a protected veteran; or disability.