Information Security Analyst

Cape Henry Associates, Acquired by JANUS Research Group; Fort Belvoir (VA); On-site; USD 80,000 - 130,000; Full time

Job summary

A leading company seeks an Information Security Analyst to spearhead cybersecurity operations and ensure compliance with DoD standards. Ideal candidates will possess a security clearance, extensive experience in cybersecurity, and the ability to implement robust security measures. This role offers opportunities for professional growth and a comprehensive benefits package, reflecting the company's commitment to staff development.

Benefits

Comprehensive benefit package

Referral bonus program

Opportunities for career growth

Qualifications

• 10+ years of experience in cybersecurity engineering and system security within a DoD environment.
• CISSP or CISM certification is required.
• Experience in automated information systems focusing on vulnerability analysis is preferred.

Responsibilities

• Lead cybersecurity operations to ensure continuous monitoring and compliance with DoD RMF requirements.
• Conduct vulnerability assessments and document findings for risk management.
• Maintain accurate security documentation and provide updates on security trends.

Skills

Cybersecurity

Information Assurance

Vulnerability Management

Risk Management

Stakeholder Collaboration

Documentation

Education

Bachelor's degree in information security, Cybersecurity, Computer Science, or related field

Bachelor's degree in information technology, Cybersecurity, or a related field

Tools

NESSUS

SCAP

ACAS

Job description

This position is contingent upon contract award.

Candidates must have an active Secret clearance and verify, before applying, that you meet the minimum requirements of the position.

The Information Security Analyst will lead cybersecurity operations, ensure compliance with the Department of Defense (DoD) Risk Management Framework (RMF), and provide expert level information assurance and vulnerability management. This role requires advanced knowledge of information security practices and the ability to collaborate effectively with stakeholders to maintain a secure and compliant operational environment.

Cybersecurity Operations and Monitoring: Lead cybersecurity operations to ensure continuous monitoring and compliance with DoD RMF requirements. Conduct comprehensive assessments of technical and nontechnical security safeguards across supported environments. Identify, document, and mitigate vulnerabilities to maintain a robust security posture.

Risk Management Framework (RMF) Compliance: Evaluate information system components for accreditation, ensuring compliance with NIST RMF and FISMA guidelines. Prepare, assemble, and maintain system ATO packages, including System Security Plans (SSPs) and other critical documentation. Collaborate with stakeholders to manage and close Plan of Action and Milestones (POA&Ms).

Vulnerability Management: Perform vulnerability assessments using tools such as NESSUS, SCAP, and ACAS, and implement appropriate remediation strategies. Conduct independent verification and validation (IV&V) of system vulnerabilities and document findings within POA&M data. Develop and recommend mitigation strategies to address identified vulnerabilities and risks.

Stakeholder Collaboration and Communication: Serve as the primary interface with clients to answer compliance related questions, explain security concepts, and resolve issues. Collaborate with security teams to enhance cybersecurity controls and practices. Provide regular updates to management on security trends, emerging risks, and best practices.

Documentation and Reporting: Maintain accurate and comprehensive security documentation, including system compliance reports and evidence for security controls. Respond to cybersecurity related data calls and provide timely, high quality deliverables. Develop and maintain operational procedures and best practices to enhance organizational security.

Continuous Improvement: Stay up to date on IT security trends, emerging threats, and industry standards. Research and recommend security enhancements to improve overall system security and compliance. Support the implementation of innovative security solutions and frameworks.

Education And Requirements

SME Level

• Bachelor’s degree in information security, Cybersecurity, Computer Science, or related field.
• Minimum 10 years of experience in cybersecurity engineering and system security within a DoD or federal environment.
• Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM).
  
  

Senior Level

• Bachelor’s degree in information technology, Cybersecurity, or a related field (or 5 years of relevant experience).
• 6+ years of experience supporting DoD automated information systems with a focus on vulnerability analysis, remediation, and compliance.
• CompTIA Security+ (IAT Level II) or equivalent certification.
  
  

Journeyman Level

• Bachelor’s degree in information technology, Cybersecurity, or a related field (or 3 years of relevant experience).
• 3+ years of experience in cybersecurity, information assurance, or related fields supporting DoD systems.
• CompTIA Security+ (IAT Level II)
  
  

Current and active Secret security clearance.

Location flexible with preference to Fort Belvoir or Fort Gregg-Adams

JANUS strives to provide opportunities for career growth through training and development. We also offer an attractive comprehensive benefit package to include health and welfare plans and financial products. As part of a total rewards program, employees can benefit from our referral bonus program, and other various employee awards. JANUS Research Group takes pride in our benefit package and rewards program which has earned us the certification of a Great Place to Work

JANUS Research Group provides reasonable accommodation so that qualified applicants with a disability may participate in the selection process. Please advise us of any accommodations you request to express interest in a position by e-mailing: Alisha Pollard, Director of Human Resources at [e-mail] or calling [phone]. Please state your request for assistance in your message. Only reasonable accommodation requests related to applying for a specific position within JANUS Research Group will be reviewed at the e-mail address and phone number supplied. Thank you for considering a career with JANUS Research Group.

JANUS Research Group participates in the Electronic Employment Verification Program. Please click the E-Verify link below for more information.

E-Verify

JANUS Research Group is an equal opportunity/ affirmative action employer. It is company policy to provide equal opportunity in all areas of employment practice without regard to race, color, religion, sex, sexual orientation, national origin, age, marital status, veteran status, citizenship, or disability.

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on their race, color, religion, sex, or national origin. Moreover, these regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment qualified individuals without regard to race, color, religion, sex, national origin, protected veteran status or disability.