Information Security Analyst 3 - Remote - Contract

Insitu, Inc.; United States; Hybrid; USD 90,000 - 130,000; Full time

Job summary

Insitu, Inc. is seeking an experienced Information Security Analyst specializing in risk management for a 12-month contract to safeguard our systems, applications, and personnel across aviation and UAS technology.

The role emphasizes governance, risk, and compliance with strong technical expertise in security controls, incident response, and threat monitoring. Collaboration with senior stakeholders and ongoing security program improvement are core responsibilities.

Qualifications

• Bachelor’s degree in IT/CS/Cybersecurity with 5+ years of info security experience, or a master’s with 3+ years.
• Strong governance, risk and compliance knowledge.
• Familiarity with NIST 800-171, DFARS, HIPAA, PCI-DSS.
• Experience configuring firewalls and security safeguard systems.
• Experience in penetration testing, vulnerability assessments, and threat monitoring.

Responsibilities

• Plan, implement, and upgrade network and information security controls.
• Identify security needs and develop strategies to safeguard sensitive information.
• Coordinate and maintain security architecture and applications; ensure ongoing infrastructure maintenance.
• Conduct compliance monitoring and implement corrective measures.
• Perform risk assessments and rigorous testing of systems and equipment.
• Develop and manage firewalls and other security technologies; establish safeguard procedures.
• Analyze system logs, configure alerts, and detect threats and anomalies.
• Execute penetration testing and vulnerability assessments to determine risk.
• Create, implement, and track mitigation plans for vulnerabilities.
• Provide active threat monitoring and respond to security incidents.
• Research and refine incident response tools and processes; participate in breach investigations.
• Develop and deliver security awareness training for staff.
• Ensure the maintenance and refinement of System Security Plan to comply with standards.
• Develop and update governance documentation including policies and standards.
• Liaise with senior stakeholders to provide security guidance.

Skills

Information security

Risk management

Penetration testing

Vulnerability assessment

Firewall management

Threat monitoring

Incident response

Security governance

Education

Bachelor's degree

Master's degree

Cybersecurity degree

Tools

Firewalls

Security architecture

Job description

Insitu has an immediate 12-month contract for an experienced Information Security Analyst specializing in Risk Management to join our Information Security team. As a key member of our enterprise security function, you will protect Insitu’s systems, applications, and personnel, supporting our mission to deliver world-class solutions in aviation and UAS technology. Your work will help ensure our infrastructure and services meet the highest security standards, maintain customer trust, and support organizational compliance. You will champion secure design, lead risk management initiatives, and collaborate across the business to solve complex security challenges.

What you’ll do:

• Plan, implement, and upgrade network and information security controls in accordance with industry standards.
• Identify security needs and develop strategies to safeguard sensitive information.
• Coordinate and maintain the implementation of security architecture and applications; ensure ongoing infrastructure maintenance.
• Conduct compliance monitoring, identify organizational deficiencies, and recommend/implement necessary corrective measures.
• Perform risk assessments, security evaluations, and rigorous testing of systems and equipment.
• Develop, deploy, and manage firewalls and other security technologies; establish effective safeguard procedures.
• Analyze system logs, configure alerts, and exploit security controls to detect threats and anomalies.
• Execute penetration testing and vulnerability assessments to determine system risk levels.
• Create, implement, and track mitigation plans for identified vulnerabilities.
• Provide active threat monitoring, evaluate indicators of compromise, and respond to security incidents.
• Research, develop, and refine incident response tools and processes; participate in breach investigations and remediation.
• Develop and deliver security awareness training for staff, both ad hoc and as required.
• Ensure the maintenance and refinement of Insitu’s System Security Plan to comply with NIST 800-171 standards.
• Develop and update governance documentation, including policies, standards, and work instructions.
• Liaise with senior stakeholders, offering security guidance to managers, directors, and executives.

Education & Experience:

• Bachelor’s degree in a technical field (e.g., Information Technology, Computer Science, Cybersecurity) and at least 5 years of relevant Information Security experience, or a master’s degree with at least 3 years.
• Strong knowledge of information security principles, including governance, risk, and compliance practices.
• Familiarity with information protection regulations (e.g., NIST 800-171, DFARS, HIPAA, PCI-DSS) and applicable laws.
• Experience setting up, configuring, and managing firewalls and security safeguard systems.
• Demonstrated experience in penetration testing, vulnerability assessment, and threat monitoring.
• Strong verbal and written communication skills for technical and non-technical audiences.
• Proven ability to independently research and resolve complex technical security issues.
• High degree of integrity and professionalism.
• Effective collaboration, teaming, and adaptability within a fast-paced, dynamic environment.

Preferred Education & Experience:

• Bachelor’s or master’s degree in Cybersecurity, Information Assurance, or related field.
• Professional Information Security certifications such as CISSP, CISM, or CEH
• Experience in highly regulated industries such as defense, aerospace, or government.
• Experience with cloud security frameworks and technologies
• In-depth understanding and practical experience with NIST, ISO/IEC 27001, or similar security frameworks.
• Familiarity with security incident response platforms

In-Office Requirement Statement: (Remote)

We let the type of work you do determine the collaboration style. That means we're not always working in an office, but we continue to gather for key moments of collaboration and connection.

• This role will need to be in the office for in-person collaboration 2-3 times per year and therefore can be located anywhere within the continental United States.
• For candidates local to the area there will be a hybrid onsite requirement based on your location.