Cybersecurity Analyst

Saliense; Northern (KY); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

PTO & Sick Time

Health/Vision/Dental/Life Insurance

401(k) with match

Parental Leave

Professional Development Reimbursement

Job summary

Saliense is seeking a Cybersecurity Analyst in the Kentucky region to join a team focused on protecting federal information systems. The role involves designing and implementing security controls, performing vulnerability assessments, and supporting RMF and NIST-based frameworks.

You will collaborate with developers, engineers, and managers to strengthen confidentiality, integrity, and availability of sensitive information, while contributing to risk management and security posture improvements.

Qualifications

• 5+ years of relevant experience in cybersecurity
• Experience with RMF and applying the NIST Cybersecurity Framework
• Knowledge of federal information system security policy and security controls
• Experience designing and implementing security solutions for sensitive information
• Familiarity with NIST SP 800-53 and FISMA audit requirements

Responsibilities

• Serves as a recognized information security expert in vulnerability assessment, risk assessment, network security, product evaluation, and security implementation.
• From a technical perspective the Information System Security Officer is responsible for designing and implementing solutions for protecting the confidentiality, integrity, and availability of sensitive information.
• Provides technical evaluations of customer systems and assists with making security improvements.
• Participates in the design of information system business impact analysis, system categorization, contingency plans, privacy documents, and other system security documentation.
• Conducts testing and audit log reviews to evaluate the effectiveness of current security measures.
• Conducts security product evaluations and recommends products, technologies, and upgrades to improve the customer’s security posture

Skills

Vulnerability assessment

Risk assessment

Network security

Product evaluation

Security implementation

Information security policy

POA&M management

NIST RMF

FISMA/audits

Team collaboration

Tools

JCAM

Job description

At Saliense, we are committed to fostering a culture of continuous learning and professional growth. Our employees are encouraged to take on challenging and meaningful work, with ample opportunities for career advancement. We offer competitive compensation and benefits, including:

• 20 Days PTO + 40 Hours of Paid Sick & Safe Time
• Health, Vision, Dental, and Life Insurance
• 401(k) with Tiered Match & 100% Vesting
• Parental Leave for Birthing and Non-Birthing Parents
• Professional Development Reimbursement Program

We believe in empowering our team members to achieve their professional goals while contributing to impactful projects that make a difference. Join us at Saliense and be part of a growing organization dedicated to innovation, collaboration, and excellence. Visit www.saliense.com to learn more.

There are many more - connect with us to get a preview of the full benefits package.

The Cybersecurity Analyst supports work performed under the contract possessing a substantial level of knowledge of federal information system security policy, industry best practices, security control assessments, Plan of Action and Milestones (POA&M) management, system authorizations, configuration management, and system analysis. Responsible for designing and implementing solutions for protecting the confidentiality, integrity, and availability of sensitive information.

Responsibilities:

• Serves as a recognized information security expert in the areas of vulnerability assessment, risk assessment, network security, product evaluation, and security implementation.
• From a technical perspective the Information System Security Officer is responsible for designing and implementing solutions for protecting the confidentiality, integrity, and availability of sensitive information.
• Provides technical evaluations of customer systems and assists with making security improvements.
• Participates in the design of information system business impact analysis, system categorization, contingency plans, privacy documents, and other system security documentation to maintain appropriate levels of protection and meet requirements for minimizing operational impact to the enterprise.
• Conducts testing and audit log reviews to evaluate the effectiveness of current security measures.
• Conducts security product evaluations, and recommends products, technologies, and upgrades to improve the customer’s security posture.

Requirements:

• 5+ years of relevant experience
• Experience with RMF and applying the NIST Cybersecurity Framework.
• Possesses substantial knowledge of federal information system security policy, industry best practices, security control assessments, Plan of Action and Milestones (POA&M) management, system authorizations, configuration management, and system analysis
• Experience designing and implementing solutions for protecting the confidentiality, integrity, and availability of sensitive information. - A technical expert providing technical support in the areas of vulnerability assessment, risk assessment, network security, product evaluation, and security implementation.
• Experience designing and implementing solutions for protecting the confidentiality, integrity, and availability of sensitive information.
• Experience using JCAM highly preferred, not required.
• Solid understanding and application of NIST Special Publications including SP 800-53
• Solid understanding of FISMA audit requirements.
• Solid understanding of IT audit requirements.
• Ability to work with cooperatively and at a technical level with developers, engineers, and managers on system teams.
• Knowledge of computer networking concepts, protocols, and network security methodologies.
• Knowledge of risk management processes and tools (e.g., methods and tools for assessing and mitigating risks).
• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy in a federal environment.
• Knowledge of current and past cybersecurity threats and vulnerabilities.