InfoSec Analyst – Journeyman (RMF, SIEM)

Oasys; Elizabeth City (NC); On-site; USD 80,000 - 110,000; Full time

Job summary

Oasys is seeking an Information Security Analyst - Journeyman to support cybersecurity, RMF, SIEM, and risk management activities for mission-critical information systems at a client site in Elizabeth City, NC. The role requires coordinating with security, technical teams, and government stakeholders to ensure compliance throughout the system development life cycle.

The successful candidate will assess risk, validate controls, monitor security posture, and remediate vulnerabilities, while

Qualifications

• Bachelor's or associate degree in Computer Science, Math, IT, Engineering, or related field, or IT certification. Two years of relevant experience may substitute.
• Minimum of two years of experience in information security as an analyst or in security operations.
• Minimum of two years of experience with Security Information and Event Management (SIEM).
• Minimum of two years of experience supporting Risk Management Framework (RMF) activities.
• Basic knowledge of Active Directory, UNIX, Windows, and relational databases.
• Active SECRET clearance required.

Responsibilities

• Plan, implement, upgrade, monitor, and support security measures designed to protect computer networks, systems, applications, digital files, and electronic infrastructure.
• Evaluate and validate technical processes supporting authorization and assessment activities to ensure systems meet organizational cybersecurity requirements.
• Perform RMF activities for information systems, including systems operating in Government cloud environments.
• Assess cybersecurity risks across systems, applications, and processes against applicable security control frameworks, regulations, policies, and requirements.
• Assist the Security Controls Auditor with security control validation and RMF activities.
• Perform vulnerability and risk analyses of computer systems and applications throughout all phases of the system development life cycle.
• Analyze vulnerability management activities, recommend remediation solutions, and develop and maintain POA&Ms.
• Use Security Information and Event Management (SIEM) capabilities to support security monitoring, analysis, and identification of potential cybersecurity events and violations.
• Identify, report, track, and support the resolution of cybersecurity violations, vulnerabilities, security incidents, and other information assurance concerns.
• Recommend information assurance and cybersecurity solutions that support customer and system security requirements.
• Support the design, engineering, integration, and implementation of computer system security solutions.
• Evaluate, test, monitor, and maintain information security policies, procedures, and security-related hardware, firmware, and software.
• Ensure risk analyses are consistent with applicable regulations and policies and support internal and external compliance requirements.
• Provide functional and systems analysis and technical support to resolve information assurance and cybersecurity-related issues.
• Develop cybersecurity training, processes, procedures, plans, and documentation to support system transitions and ongoing operations.
• Prepare correspondence, reports, white papers, meeting minutes, spreadsheets, briefs, communications products, and other cybersecurity documentation as required.
• Identify and develop methods, plans, and documentation to streamline operating procedures, improve security operations, and support long-range program and project planning.

Skills

Cybersecurity principles

RMF support

SIEM experience

Vulnerability analysis

POA&Ms

Active Directory

UNIX

Windows

Relational databases

Security policies

Systems analysis

Communication skills

Cross-functional collaboration

Education

Bachelor's degree in Computer Science, Math, Information Technology, Engineering, or related field

Two years of relevant information security experience may substitute for education

Tools

SIEM platforms

Job description

Oasys is seeking an Information Security Analyst - Journeyman to support cybersecurity, RMF, SIEM, and risk management activities for mission-critical information systems at a client site in Elizabeth City, NC. The role requires coordinating with security, technical teams, and government stakeholders to ensure compliance throughout the system development life cycle.

The successful candidate will assess risk, validate controls, monitor security posture, and remediate vulnerabilities, while