Cybersecurity Analyst, Senior

Acentra Health; McLean (VA); On-site; USD 99,000 - 136,000; Full time

Job summary

Acentra Health is seeking a Senior Cybersecurity Analyst in McLean, VA to monitor cloud security posture and produce compliance documentation. You will interact with engineers and system administrators to enforce security guidelines and lead security audits for cloud environments.

The role requires 10+ years of IT security experience, advanced certifications, and a US public trust clearance. You will drive remediation activities, liaison with leadership, and manage small security projects within

Qualifications

• Bachelor's degree in information technology or related field from a US-accredited college.
• Active security certification: CISSP, CISM, CISA, CompTIA Security+, CAP, or GIAC S&E.
• 10+ years applying IT security controls.
• 2+ years using federal processes and standards (NIST, FIPS, FISMA, DHS 4300A).
• Familiar with Federal Security Policy Documentation (POA&Ms, SSPs, etc.).
• Ability to provide security requirements for statements of work.
• Ability to update security plans and policies to stay compliant.
• US citizenship and residency in the US for 3 of the last 5 years; public trust clearance.

Responsibilities

• Understand and implement Authority to Operate (ATO) for systems per FedRAMP High and HIPAA.
• Apply NIST 800-53 v5 controls and security plans.
• Serve as liaison between program managers and senior leaders with technical reports and incident findings.
• Review and update system security, incident response, and contingency documentation.
• Prepare deliverables for the customer as required by contract.
• Assist SIEM investigations and coordinate customer notifications per obligations.

Skills

Security controls

Documentation

Vendor liaison

Risk remediation

System design

SIEM collaboration

Education

Bachelor's degree in IT related field

Tools

NIST 800-53

FedRAMP

POA&Ms

SSPs

ATO processes

Job description

Acentra Health exists to empower better health outcomes through technology, services, and clinical expertise. Our mission is to innovate health solutions that deliver maximum value and impact.

Lead the Way is our rallying cry at Acentra Health. Think of it as an open invitation to embrace the mission of the company; to actively engage in problem-solving; and to take ownership of your work every day. Acentra Health offers you unparalleled opportunities. In fact, you have all you need to take charge of your career and accelerate better outcomes - making this a great time to join our team of passionate individuals dedicated to being a vital partner for health solutions in the public sector.

Job Summary and Responsibilities

Acentra Health is looking for a Sr. Cybersecurity Analyst to join our growing team.

Job Summary:

The Senior Cybersecurity Analyst, as part of a team, will provide tracking and briefing of the security status of cloud service provider systems. Contribute to writing and review of security documentation to security status of cloud products and environments. Meet with Engineers, and System Administrators to review security guidelines. Will perform security audit and compliance tasks for cloud applications. Be part of panel to provide guidance to System Administrators performing remediation activities. Project management for small projects by running meetings with the customer and vendors in a small team.

Responsibilities:

• Understand, establish, and implement Authority to Operate (ATO) for systems to adhere with FedRAMP High guidelines and the HIPAA rule
• In-depth Knowledge of NIST 800-53 v5 framework to execute security controls and plans
• Serve as liaison between program managers and senior leaders providing technical documents, incident reports, findings from computer examinations, summaries, and other situational awareness information. Analyze security posture and vulnerabilities present in cloud architecture systems
• Update and review technical security documentation deliverables such as system security, incident response and contingency plans
• Prepare deliverables for the customer as required by contract
• Assist SIEM with investigations of suspected incidents, compete customer notifcations according to contractual obligations

Qualifications

• A Bachelor's degree or higher from a US Department of Education accredited college or university recognized by the corresponding professional associations in an information technology-related field
• An active certification from one of the following: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), CompTIA Security+, Certified Authorization Professional (CAP), or GIAC Security Essentials (GSEC)
• Minimum of 10 years of experience applying information technology security controls
• Minimum of 2 years using federal processes, procedures, and standards in implementing information technology security controls (e.g., National Institute of Standards and Technology (NIST) Special Publications, Federal Information Processing Standards (FIPS), Federal Information Security Modernization Act of 2014 (FISMA), DHS Policy Directive 4300A)
• Knowledgeable with Federal Security Policy Documentation (POA&Ms, SOP's, Contingency Plans, SSPs, etc.)
• Providing system-related input on cybersecurity requirements to be included in statements of work and other appropriate procurement documents
• Analyzing and updating security plans, policies, and procedures to ensure they align with cybersecurity laws and regulations and the organization's cyber objectives.
• Developing related system design to enhance cyber security controls and to reduce vulnerabilities, mitigate risks, and develop remediation plans to harden relevant security systems
• US citizenship and residency and must have resided in the US for 3 of the last 5 years.
• A public trust security clearance is required to perform this job. Failure to achieve and maintain the necessary clearance will result in the disqualification of the selected candidate from the position.

Why us?

We are a team of experienced and caring leaders, clinicians, pioneering technologists, and industry professionals who come together to redefine expectations for the healthcare industry. State and federal healthcare agencies, providers, and employers turn to us as their vital partner to ensure better healthcare and improve health outcomes.

We do this through our people.

You will have meaningful work that genuinely improves people's lives across the country. We are a company that cares about our employees, and we give you the tools and encouragement you need to achieve the finest work of your career.

Benefits

Benefits are a key component of your rewards package. Our benefits are designed to provide you with additional protection, security, and support for both your career and your life away from work. Our benefits include comprehensive health plans, paid time off, retirement savings, corporate wellness, educational assistance, corporate discounts, and more.

EEO AA M/F/Vet/Disability

Acentra Health is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran or any other status protected by applicable Federal, State or Local law.

Compensation

"Based on our compensation philosophy, an applicant's position placement in the pay range will depend on various considerations, such as years of applicable experience and skill level."

Pay Range

USD $98,960.00 - USD $136,000.00 /Yr.

Visit us at Acentra.com/careers/