Information Security Analyst

Talentify; Carson City (NV); Remote; USD 69,000 - 76,000; Full time

Benefits offered by this job

Comprehensive medical benefits

Competitive pay

401(k) retirement plan

Job summary

INSPYR Solutions is seeking an Information Security Analyst for 100% remote work with core Pacific Time hours. The role focuses on security oversight, RMF assessments, and extensive audits across cloud and on-prem environments.

The candidate should hold a CISSP, AWS Cloud Security Engineer or Salesforce Cloud Security Engineer (desired), and pass background checks. Strong documentation and monitoring capabilities are required.

Qualifications

• Bachelor's degree in CS or MIS with 5 years of IT experience related to duties.
• Experience including security, systems/network/database administration, or applications development.
• Two years at journey level or supervisory/project management capacity.

Responsibilities

• Perform duties of Information Security Officer.
• Support penetration testing activities.
• Conduct RMF assessments using NIST 800-53 and CIS controls for cloud and on-prem environments.
• Maintain IS security documentation (SSP, IA SOP, POA&M, etc.).
• Lead security audits and support external agency audits.
• Monitor security posture with tools (Tenable, Symantec, Alteris, Anomali, SolarWinds).
• Assess changes to IS for PCI-DSS, CJIS, and data privacy compliance.

Skills

NIST RMF knowledge

Information security fundamentals

Education

Bachelor's degree in computer science, MIS, or related field

Five years of progressively responsible IT experience

Equivalent education/experience combination

Tools

Tenable

Symantec

Alteris

Anomali

SolarWinds

Job description

Information Security Analyst

• Title: Information Security Analyst
• Location: 100% remote
• Duration: to at least 09/22/2027 (with possible extensions)
• Compensation: $50.00 – $55.00/hour
• Work Requirements: US Citizen, GC Holders or Authorized to Work in the U.S.

Project Overview

• Information Technology (IT) Professionals analyze, develop, implement, maintain, and modify computer operations, systems, networks, databases, applications, and/or information security.
• Incumbents may perform duties in one or more IT specialization areas depending on the needs of the agency.
• Incumbents perform supervisory duties and manage projects of varying size, scope, and impact to agency operations to include serving as the project leader; planning, organizing, and directing project activities; resolving design conflicts; data administration; resource allocation; contract negotiation; timeline development; critical path tracking; justifying the need for additional resources; and coordination with other work units within and outside the organization as assigned.

Primary responsibilities will be performing the duties of an Information Security Officer. Security functions include but are not limited to:

• Support Penetration Testing
• Conduct comprehensive assessments of the management in accordance with NIST Risk Management Framework (RMF), operational, and technical security controls employed within or inherited by a system to determine the overall effectiveness of the security controls using NIST 800-53 and Center for Internet Security (CIS) Controls for OMV ON-PREM and Cloud environments including AWS, Salesforce, and Mulesoft CSPs.
• Generate and maintain required IS security documentation including Systems Security Plans (SSP), Information Assurance Standard Operating Procedures (IA SOP), Continuous Monitoring Plans, Security Control Traceability Matrices, Risk Assessments, Plan of Action & Milestones (POA&M), equipment specifications, practices, and procedures.
• The position will perform security audits and support external agency audits to ensure compliance with state and federal rules in the following areas: investigations, security awareness training administration, security access control recommendations, badge access administration, risk assessments, approval authorization, anomalous activity detection alert notifications and incident response, and evaluation of software and hardware recommendations with related cost estimates.
• Maintain day-to-day security posture and continuous monitoring of OMV networks and systems utilizing tools such as Tenable, Symantec, Alteris, Anomali, and Solarwinds in accordance with security policies and procedures.
• Schedule, perform and maintain records of required IS auditing, patching, maintenance, software/hardware changes, and scanning based on evolving threats, vulnerabilities and customer compliance requirements.
• Assess changes to an IS by performing periodic self-inspections for compliance with PCI-DSS, CJIS, and state and federal data privacy requirements, tests, and reviews of the IS program to ensure that systems are operating as authorized/accredited and that conditions have not changed; ensure corrective actions are taken for identified findings and vulnerabilities.

MIMIMUM QUALIFICATIONS

• Bachelor's degree from an accredited college or university with major course work in computer science, management information systems, or closely related field and five years of progressively responsible professional IT experience relevant to the duties of the position which may include systems administration, network administration, database administration, applications analysis and development, and/or information security, two years of which were at the advanced journey level or in a supervisory or project management capacity;
• OR Bachelor's degree from an accredited college or university with major course work in computer science, management information systems, or closely related field and five years of progressively responsible professional IT experience which may include systems administration, network administration, database administration, applications analysis and development, and/or information security, relevant to the duties of the position, two years of which were at the journey level in information security;
• OR two years of relevant experience as an IT Professional Ill in Nevada State service;
• OR an equivalent combination of education and experience as described above.

SPECIAL REQUIREMENTS

• Current CISSP
• A pre-employment criminal history check and fingerprinting are required.
• Current AWS Certified Security, Salesforce Cloud Security Engineer (desired)
• Work is with Confidential information

OTHER

Must be able to pass our client's Criminal background check before starting work.

100% remote work, but you must be willing & able to work core Pacific Time zone hours.

Our benefits package includes

• Comprehensive medical benefits
• Competitive pay
• 401(k) retirement plan
• and much more!

About INSPYR Solutions

Technology is our focus and quality is our commitment. As a national expert in delivering flexible technology and talent solutions, we strategically align industry and technical expertise with our clients' business objectives and cultural needs. Our solutions are tailored to each client and include a wide variety of professional services, project, and talent solutions. By always striving for excellence and focusing on the human aspect of our business, we work seamlessly with our talent and clients to match the right solutions to the right opportunities. Learn more about us at inspyrsolutions.com.

INSPYR Solutions provides Equal Employment Opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, genetics, or any other protected status. INSPYR Solutions complies with all applicable laws governing nondiscrimination in employment in every location in which the company has facilities.

Applicants requiring reasonable accommodation during the application or interview process should contact [e-mail] for assistance. Information collected and processed through your application with INSPYR Solutions (including any job applications you choose to submit) is subject to INSPYR Solutions' Privacy Policy and INSPYR Solutions' AI and Automated Employment Decision Tool Policy: https://www.inspyrsolutions.com/policies/. By submitting an application, you are consenting to being contacted by INSPYR Solutions through phone, email, or text.