Information Assurance Analyst Senior

Socket.dev; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Socket.dev is seeking an Information Assurance Analyst Senior in Washington, DC to ensure information systems meet organizational standards and end-user requirements. You will serve as the SME for Federal Assessments & Authorizations (A&A) and help lower risk while improving the defensive posture.

Responsibilities include addressing complex issues, reporting progress to management, and devising improvements to procedures and future configurations.

Qualifications

• CISSP and/or CISM certification required or equivalent.
• Senior-level cybersecurity expertise.
• Experience supporting Federal IT organizations for Assessments & Accreditations (A&A).
• Experience conducting risk assessments and vulnerability assessments.
• Familiarity with Federal A&A processes and monitoring for security breaches.
• Experience developing security test solutions and training/awareness materials.

Responsibilities

• Acts as SME for Federal A&A; provides recommendations to reduce risk.
• Works to resolve complex security problems.
• Reports progress to management on resolutions.
• Develops improvements to procedures and future configuration models.
• Performs workflow analysis and quality improvements.

Skills

CISSP/CISM

Senior cybersecurity expertise

Federal IT experience

Risk assessment

Vulnerability assessment

A&A process knowledge

Security monitoring

Training materials development

Job description

The Information Assurance Analyst Senior carries out procedures to ensure that all information systems, products, and services meet organization standards and end-user requirements.

Responsibilities

• Acts as a subject matter expert (SME) for Federal Assessments & Authorizations (A&A); provides sound advice and recommendations to lower risk and improve the overall defensive posture.
• Works to resolve complex problems.
• Reports progress on problem resolution to management.
• Devises improvements to current procedures and develops models of possible future configurations.
• Performs complex workflow analysis and recommends quality improvements.

Required Qualifications:

• ISC2 Certified Information Systems Security Professional (CISSP) and/or ISACA Certified Information Security Manager (CISM)
• Cybersecurity professional expertise at a senior level
• Experience supporting Federal IT organizations in accomplishing Assessments and Accreditations
• Experience conducting risk assessments and vulnerability assessments
• Experience with the Federal Assessment & Authorization (A&A) Processes
• Experience monitoring networks and systems for security breaches or intrusions
• Experience developing test security solutions using industry standard analysis criteria
• Experience developing strategies, programs and training and awareness materials

Desired Qualifications:

• Knowledge and experience using the Cybersecurity Asset Management (CSAM) or similar Vulnerability Management System(s)
• Experience with FedRAMP compliance and certification
• Experience assessing and auditing cloud service offerings
• Knowledge and experience with Zero Trust architecture, solutions and compliance or reporting standards
• AWS Certified Security - Specialty certification
• GNMA or HUD experience