Information Security Analyst

SkyePoint Decisions; Springfield (VA); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Certification incentive program

PTO & holidays

Health insurance options

401k matching

Life insurance

Job summary

SkyePoint Decisions seeks an Information Security Analyst to support a Department of State cybersecurity program. The role involves protecting enterprise systems, networks, and data by implementing controls, conducting risk assessments, and monitoring compliance in both classified and unclassified environments.

The ideal candidate will have TS/SCI clearance, 5+ years in federal security, and hands-on experience with RMF, NIST 800-53, FedRAMP, and security documentation.

Qualifications

• Minimum 5 years of cybersecurity or information security experience supporting federal government, intelligence community, or DoD environments.
• Active TS/SCI Clearance.
• Bachelor's degree in a related field or equivalent combination of education and experience.
• Current Security+ or DoD 8570/8140 IAT Level II certification.
• Experience with NIST SP 800-53 Security Controls and security control assessments.
• Experience with vulnerability management and FedRAMP compliance.
• Experience with security authorization processes and compliance documentation.
• U.S. Citizenship is required.

Responsibilities

• Support implementation and monitoring of cybersecurity controls per NIST SP 800-53 and DoS policies.
• Assist RMF activities including control implementation, assessment, authorization, and continuous monitoring.
• Conduct security assessments, compliance reviews and risk analyses.
• Monitor security posture and identify vulnerabilities and gaps.
• Develop and maintain cybersecurity documentation.
• Manage security control lifecycle from implementation through remediation.
• Coordinate remediation with admins and engineers.
• Support FedRAMP, FISMA and DoS requirements.
• Participate in incident response, investigations and forensics.
• Generate security metrics and compliance dashboards.

Skills

5+ years cybersecurity

TS/SCI Clearance

Security+ / DoD 8570 II

RMF / NIST SP 800-53

Vulnerability management

Security documentation

US Citizenship

Education

Bachelor's degree in Cybersecurity / IT / CS

Tools

SIEM tools

Vulnerability management tools

Cybersecurity monitoring platforms

Job description

SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.

This is a contingent position based upon contract win.

SkyePoint Decisions is seeking an Information Security Analyst to support a Department of State cybersecurity program.The Information Security Analyst will assist in protecting enterprise systems, networks, and data by implementing security controls, conducting risk assessments, monitoring compliance, and supporting cybersecurity operations across classified and unclassified environments.

The successful candidate will have experience with federal cybersecurity frameworks, security control implementation, compliance monitoring, vulnerability management, and Risk Management Framework (RMF) processes. This position requires the ability to work closely with government stakeholders, technical teams, and cybersecurity leadership.

This location of this position is still TBD but expected to be in a DOS office. Hybrid work will be allowed.

Responsibilities:

• Support the implementation and monitoring of cybersecurity controls in accordance with NIST SP 800-53, Department of State policies, and federal security requirements.
• Assist with Risk Management Framework (RMF) activities, including security control implementation, assessment, authorization, and continuous monitoring.
• Conduct security assessments, compliance reviews and risk analyses for information systems and applications.
• Monitor system security posture and identify vulnerabilities, threats and compliance gaps.
• Assist in developing and maintaining cybersecurity documentation.
• Support security control lifecycle management from implementation through ongoing assessment and remediation.
• Analyze vulnerability scan results and coordinate remediation efforts with system administrators and engineering teams.
• Ensure compliance with FedRAMP, FISMA and Department of State cybersecurity requirements.
• Participate in incident response activities, investigations, and forensic support efforts as required.
• Generate security metrics, status reports, and compliance dashboards for management review.
• Support internal and external audits, inspections and authorization activities.
• Research emerging threats and recommend improvements to enhance organizational security posture.

Required Qualifications:

• Minimum 5 years of cybersecurity or information security experience supporting federal government, intelligence community, or Department of Defense environments.
• Active Top Secret/Sensitive Compartmented Information (TS/SCI) Clearance.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field (or equivalent combination of education and experience).
• Current CompTIA Security+ certification or equivalent DoD 8570/8140 IAT Level II certification.
• Experience working with:
• NIST SP 800-53 Security Controls
• Security Control Assessments
• Vulnerability Management
• FedRAMP Compliance
• Security Authorization Processes
• Experience preparing and managing compliance and security documentation.
• Strong analytical, problem-solving, and communication skills.
• Must be a U.S. Citizen.

Preferred Qualifications:

• Certified Information Systems Security Professional (CISSP) certification.
• Certified ScrumMaster (CSM) certification.
• Experience supporting Department of State cybersecurity programs.
• Experience with cloud security and FedRAMP-authorized cloud environments.
• Familiarity with security information and event management (SIEM) solutions, vulnerability management tools, and cybersecurity monitoring platforms.
• Experience supporting classified systems and sensitive government environments.

Compensation:

Salary Range: TBD

The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package.

Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies and experience, as well as contract-specific affordability, market data and business considerations.

In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance and 401k matched.

What We Can Offer You:

• At SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day.
• Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options and 401k matched.
• Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs.

SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives.

SkyePoint Decisions is a participating E-Verify Employer.

U.S. Citizenship is required for most positions.

Equal Opportunity Employer/Veterans/Disabled.