Information Security Analyst Senior

Cybersecurity Jobs; Tyndall Air Force Base (FL); On-site; USD 95,000 - 135,000; Full time

Benefits offered by this job

401K with company match

Comprehensive health packages

Internal mobility support

Professional growth & certifications

Paid vacation/holidays

Job summary

Cybersecurity Jobs seeks a Senior Information Security Analyst to coordinate vulnerability scanning, strengthen management practices, and support remediation and audit efforts. You will collaborate with Engineering, Operations, and vendors to protect information and reduce unauthorized access.

Key tasks include applying RMF and NIST standards, prioritizing vulnerabilities, documenting findings, and supporting examinations.

Qualifications

• BA/BS with 3+ years of related experience; 7+ years acceptable in lieu of degree.
• Proficient with Microsoft Server environments and AD/RADIUS/DNS/GP.
• Experience with vulnerability management tooling and scans.
• Security clearance or eligibility preferred; secret clearance may be required.
• On-site work at a U.S. government facility (Tyndall AFB).

Responsibilities

• Coordinate vulnerability scanning and identification across network hosts.
• Apply RMF/ NIST standards and security controls for vulnerability management.
• Identify priority vulnerabilities and propose remediation approaches.
• Analyze data and assist with prioritization and remediation per standards.
• Document findings, updates to security standards, and communicate with stakeholders.
• Support examinations and audits with data collection and evidence.
• Work with security vendors (ACAS, HBSS) to explore solution approaches.
• Assist ISSO activities by assessing systems, recommending improvements, and documenting upgrades.

Skills

Vulnerability management

Risk assessment

RMF knowledge

NIST standards

Security governance

Education

BA/BS and 3+ years of experience; 7+ years in lieu of degree

Tools

ACAS

HBSS

VMware

Hyper-V

Trellix ENS

Tenable Security Center

SQL Server

Active Directory

Radius

DNS

Group Policy

Job description

The Senior Information Security Analyst will coordinate vulnerability scanning and identification across network hosts, strengthen vulnerability management practices, and support remediation and audit or examination efforts. The role works closely with Engineering and Operations teams, along with vendors, to help protect information and reduce the risk of unauthorized access.

Key Responsibilities

• Manage system vulnerabilities in alignment with security requirements, applying NIST continuous monitoring standards and RMF critical security controls and countermeasures based on mission system risk assessments.
• Identify and evaluate emergency or priority vulnerabilities, incorporating input from cyber intelligence, engineering, or operations, and propose targeted remediation approaches.
• Analyze vulnerability data and assist with prioritization and remediation efforts in accordance with risk and vulnerability management standards.
• Develop a deep understanding of vulnerabilities, including impacts and mitigation techniques, and clearly document and communicate findings to stakeholders.
• Update and create security standards and templates to meet evolving regulatory, audit, and related requirements.
• Improve the effectiveness and efficiency of enterprise vulnerability management practices across identification, assessment, and remediation.
• Leverage and enhance existing vulnerability management frameworks, policies, and standards to support minimum industry best practices.
• Coordinate data collection and documentation needed for examinations and audits.
• Work with existing security solution vendors (for example, ACAS and HBSS) to identify potential solution approaches.
• Research, develop, implement, test, and review information security measures to protect information and prevent unauthorized access.
• Gather information necessary to maintain security and support external barrier capabilities such as firewalls and other security controls.
• Support ISSO activities by assessing and reviewing systems to identify weaknesses, recommending improvements to address vulnerabilities, implementing changes, and documenting upgrades.

Required Qualifications

• BA/BS and 3+ years of experience; additional years may be considered in lieu of degree (7+ years).
• Experience and training with Microsoft Server 2016/2019 or newer, including Active Directory, Radius, DNS, and Group Policy.
• Experience and training with virtual environments (such as VMware and Hyper‑V).
• Familiarity with maintaining and operating Trellix ENS (formerly McAfee Endpoint Security) and Tenable Security Center (ACAS) scans.
• Familiarity with maintaining and operating SQL Server.
• Experience applying patches/updates and STIGs.
• Ability to possess and maintain a minimum IAT level II certification IAW the DoW directive 8140.01 (sec+, CCSP, CASP+).
• Secret clearance.
• On customer site.

Technologies and Tools

• NIST continuous monitoring standards
• RMF
• ACAS, HBSS
• Microsoft Server 2016, Microsoft Server 2019
• Active Directory, Radius, DNS, Group Policy
• VMware, Hyper-V
• Trellix ENS (formerly McAfee Endpoint Security)
• Tenable Security Center (ACAS)
• SQL Server
• STIGs
• Firewalls and other security measures

Benefits

• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility team dedicated to helping you own your career
• Professional growth opportunities including paid education and certifications
• Cutting-edge technology you can learn from
• Paid vacation and holidays to help rest and recharge

Required Clearance and Work Details

• Clearance level: Secret
• Public trust: None
• Requisition type: Regular
• Location: Tyndall AFB, Florida (Onsite Workplace)
• Travel required: Less than 10%
• Citizenship: U.S. Citizenship Required

Identity Verification Process

• You are expected to be on camera during virtual interviews.
• The employer may take your picture to verify your identity and prevent fraud.
• Proceeding authorizes the collection, processing, and use of biometric data for identity verification and security purposes.