Information Security Analyst

Mount Mary University; Linthicum (MD); On-site; USD 110,000 - 150,000; Full time

Job summary

Dynamic Solutions Technology, LLC is seeking a full-time Information Security Analyst to support a Federal Government customer. The on-site role is located in Linthicum, MD, with an active TS/SCI eligibility requirement.

Responsibilities include monitoring security across classified and unclassified environments, conducting vulnerability management, and supporting RMF and DoD baselines in a SOC context. Qualifications include 5+ years in patch/vulnerability management or related cybersecurity

Qualifications

• 5+ years in patch management or vulnerability management or related cybersecurity field.
• Active TS/SCI clearance or eligibility.
• BS in related field; two of the following certifications: Security+, CySA+, SSCP or equivalent under DoD 8140.

Responsibilities

• Monitor enterprise information systems, networks, applications, and security infrastructure for threats.
• Conduct vulnerability scans, analyze results, and track remediation per DoD baselines.
• Investigate alerts, document findings, and support containment, eradication, and reporting.
• Support RMF/NIST 800-53 controls and maintain SSPs, POA&Ms, and authorization artifacts.
• Collaborate with ISSMs/ISSOs, system owners, and government personnel on security artifacts.
• Utilize SIEM and endpoint protection to correlate events and support SOC activities.
• Evaluate configurations against STIGs and approved baselines; coordinate fixes.
• Analyze threat intel, indicators of compromise, and logs to detect emerging threats.
• Work with engineers, cloud architects, and stakeholders to improve security posture.
• Prepare vulnerability reports, incident docs, risk assessments, and remediation metrics.

Skills

Security clearance

Patch management

Vulnerability management

Cybersecurity operations

Education

BS in related field

Tools

SIEM platforms

eMASS

Vulnerability scanners

Job description

Dynamic Solutions Technology, LLC, a premier strategic services firm that meets IT and Service needs for commercial and government clients. We are seeking a full-time Information Security Analyst to support a Federal Government customer. This is an exempt, on-site position located in Linthicum, MD.

Security Clearance:

Active Secret w/TS/SCI eligibility

Responsibilities

• Monitor enterprise information systems, networks, applications, and security infrastructure to identify suspicious activities, potential threats, unauthorized access, and security vulnerabilities across classified and unclassified environments.
• Conduct recurring vulnerability scans, analyze assessment results, identify security weaknesses, prioritize remediation activities, and track corrective actions to ensure compliance with DoD cybersecurity requirements and established security baselines.
• Investigate cybersecurity alerts, analyze potential security incidents, document findings, and support incident containment, eradication, recovery, and reporting activities in coordination with cybersecurity leadership and authorized Government personnel.
• Support the implementation and assessment of security controls in accordance with the DoD Risk Management Framework (RMF), NIST SP 800-53, and applicable cybersecurity policies to maintain system security authorization and operational compliance.
• Assist ISSMs, ISSOs, and system owners in developing, reviewing, and maintaining System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), security assessment documentation, and authorization artifacts within eMASS or other Government-approved systems.
• Utilize Security Information and Event Management (SIEM) platforms, intrusion detection tools, endpoint protection solutions, and automated monitoring technologies to correlate security events, identify anomalous behavior, and support Security Operations Center (SOC) activities.
• Evaluate system configurations against applicable Security Technical Implementation Guides (STIGs), security checklists, and approved configuration baselines; identify compliance deficiencies and coordinate corrective actions with system administrators and engineering personnel.
• Analyze cybersecurity threat intelligence, indicators of compromise, network activity, and system logs to identify emerging threats, investigate suspicious behavior, and support proactive threat hunting and defensive cybersecurity operations.
• Collaborate with cybersecurity engineers, network administrators, DevSecOps personnel, cloud architects, and Government security stakeholders to evaluate technical risks, implement security improvements, and support secure enterprise operations.
• Prepare vulnerability assessment reports, security incident documentation, risk assessments, compliance findings, remediation status reports, and cybersecurity performance metrics while recommending improvements to strengthen the enterprise security posture.

Minimum Qualifications

• 5+ years of experience in patch management, vulnerability management, cybersecurity operations, or a related IT security field.
• Security Clearance: Active TS/SCI clearance or eligibility
• BS in related filed.
• Two of the following certifications: CompTIA Security+, CySA+, SSCP, or another certification appropriate to the assigned duties under DoD 8140 qualification requirements.