Cybersecurity Systems Analyst

FSR, LLC.; Herndon (VA); Hybrid; USD 100,000 - 130,000; Full time

Job summary

FSR, LLC. is seeking a Senior Technical Security Analyst in Herndon, VA. This role will primarily support the FedRAMP and FISMA authorization processes for cloud products, performing security assessments and continuous monitoring.

The ideal candidate will possess a Bachelor's Degree in Computer Science or related field, with at least 5 years of experience, including proficiency in AWS and Azure. This position offers an 80% remote work model post-pandemic, allowing for flexibility while providing critical support for cybersecurity initiatives.

Qualifications

• 5+ years of experience in Information Technology.
• Experience with security documentation and controls.
• Ability to analyze vulnerability scans and network diagrams.

Responsibilities

• Support FedRAMP and FISMA authorization for Cloud Products.
• Conduct vulnerability scans and security assessments.
• Collaborate with security engineering and operations teams.

Skills

Cloud technologies experience

FedRAMP experience

Information Technology proficiency

Communication skills

Education

Bachelor’s Degree in Computer Science or related field

Tools

Nessus/Security Center

AWS

Azure

Splunk

Job description

Entrusted by companies with challenging Cybersecurity and IT data management recruiting needs, Flex Staffing Resources identifies exceptional talent and cutting edge companies and brings them together.

Job Description

Location of Services: Herndon, VA 20171 (1 day a week)

Remote: 80% (4 days a week)

Supports the FedRAMP and FISMA authorization(s) of new Cloud Products and 3rd Party Applications into various cloud environments. This effort requires security testing/assessment support, the knowledge/development of the appropriate security documentation (i.e., System Security Plan (SSP), plans and procedures), and ongoing continuous monitoring activities. This position is majority remote (post-pandemic).

This role serves as a “hands‑on” senior‑level technical security analyst responsible for interfacing with operations and security engineering teams on security issues and information gathering and documenting their implementation in the SSP.

Additionally, this role will assist with the security assessments and continuous monitoring of evidence for any of the clients environments (corporate, commercial regulated, FedRAMP, DOD and International).

GENERAL RESPONSIBILITIES:

• Configuration, Execution and Analysis of vulnerability scans
• Ability to interpret and assess network diagrams and drawings using Visio.
• Identify and assess Cloud System state, including vulnerabilities, RMF package status/accreditation model,PPS compliance, patching, and Cybersecurity Vulnerability Assessments (CSVA) mechanisms.
• Demonstrate familiarity with current FedRAMP, DOD and NIST Security controls and technologies, including vulnerability management capabilities.
• Understand enterprise operating environments, including security posture, application environment, and associated security controls.
• Understand/document information system specificationsand security controls, including logical and physical diagrams, connectivity, communication, and data flow diagrams, both internal and external to the system.
• Gather information, architecture diagrams and implementation of the security controls through interfacing with the security engineering, and operations and build teams.
• Develop security documentation input of technical control implementation
• Understand the intent of the FedRAMP moderate security controls, FISMA security controls and communicate as needed
• Assist with the FedRAMP or FISMA authorization to include, but not limited to, prep of security engineering, build and operations teams through training and mock interviews, update implementation language in the security documentation and develop processes as required, and support FedRAMP PMO/ Agency / CISO requests
• Ability to respond effectively to customer’s concerns regarding ConMon activities

Qualifications

• Bachelor’s Degree in Computer Science / MIS / Information Technology, or equivalent experience in Information Security, Information Technology, or related technical discipline
• Minimum 5 years Information Technology experience
• Experience with Cloud technologies, especially AWS and Azure, desirable
• Experience with FedRAMPand/or other authorization processes and NIST risk management framework
• Execution and Analysis of vulnerability scans; such as but not limited to: Nessus/Security Center, WebInspect, etc.
• Familiarity with Splunk to execute queries, search/review data for impact.
• Experience in developing, evaluating, and implementing information security architectures, technologies, standards, and practices to secure applications and IT systems, desirable
• Flexible, self‑motivated, and able to work independently in a fast paced environment
• Excellent communication skills and the proven ability to work effectively with all levels of IT and business management.
• Skill in preparing and making written and oral presentations of complex technical nature.
• Demonstrated ability to coordinate multiple tasks

Additional Information

Qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, sexual orientation, gender identity, disability or protected veteran status.