Journeyman Information Security Analyst

Page Mechanical Group, Inc.; Idaho; Remote; USD 80,000 - 120,000; Full time

Job summary

A leading HUBZone IT solutions provider is seeking a cybersecurity professional for a remote position. You will implement security controls, conduct vulnerability assessments, and support identity management protocols. The ideal candidate has a Bachelor's degree in a relevant field and Security+ CE certification, with 5 years of related experience, including 3 years of direct involvement in system security or incident response. Join a committed team at the forefront of cybersecurity and community engagement.

Qualifications

• 5 years of experience in information security or cyber risk management.
• 3 years of hands-on experience in system security analysis or incident response.

Responsibilities

• Implement security controls according to NIST standards.
• Monitor and analyze audit logs and security events.
• Support identity and access management controls.
• Conduct vulnerability scanning and configuration compliance checks.

Skills

Information security

Cyber risk management

Vulnerability management

Incident response

System security analysis

Education

Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field

Security+ CE certification

Job description

About Our Company:

Delmock Technologies, Inc. (DTI), is a leading HUBZone business in Baltimore, known for delivering sophisticated IT (Information Technology) and Health solutions with a commitment to ethics, expertise, and superior service. Actively engaged in the local community, DTI creates opportunities for talented residents while maintaining a stellar reputation as an award‑winning contractor, earning accolades like the Government Choice Award for IRS (Internal Revenue Service) Systems Modernizations.

Location

This position is remote.

Clearance: Active IRS MBI Clearance is required to be considered for this position.

Responsibilities

• Implement and assess security controls in accordance with FISMA, FedRAMP, IRS IRM 10.8, and National Institute of Standards and Technology (NIST) SP 800-53 Moderate/High baselines.
• Support RMF activities including control implementation, evidence collection, SSP updates, and POA&M development and tracking.
• Perform vulnerability scanning, configuration compliance checks, and remediation validation in alignment with NIST SP 800-40 and SP 800-70 requirements.
• Monitor and analyze audit logs and security events; ensure integration with enterprise logging systems (e.g., ESAT) for centralized analysis and reporting.
• Validate implementation of encryption controls (data‑at‑rest and data‑in‑transit) meeting FIPS 140‑2/140‑3 standards and proper key management practices (NIST SP 800-57).
• Support identity and access management controls including least privilege, role‑based access, MFA enforcement, and privileged account monitoring (e.g., BEARS, PUMAS integration).
• Assist with remediation of Known Exploited Vulnerabilities and compliance with Binding Operational Directives issued by the Cybersecurity and Infrastructure Security Agency (CISA).
• Contribute to Zero Trust Architecture implementation efforts in accordance with NIST SP 800‑207.
• Support development of security documentation and artifacts including ISCPs, SRAs, SCAs, SBOM validation, and C‑SCRM evidence collection.
• Participate in audits, security assessments, incident response activities, and continuous monitoring reporting to ensure ongoing compliance.

Minimum Requirements

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field.
• Security+ CE certification.
• Five years of progressively responsible experience in information security, cyber risk management, or IT security operations. Must include at least 3 years of hands‑on experience in system security analysis, vulnerability management, or incident response within a Federal Information Systems Security or equivalent enterprise environment.

Preferred/Nice to Have Skills

• Higher‑level certifications (e.g., CISSP, CISM, CEH, CAP) preferred and may substitute for additional years of experience.

Recently ranked as high as #3 among HUBZone Companies in a GOVWIN survey, DTI offers a dynamic environment for those passionate about impactful projects, community involvement, and contributing to top‑ranking Federal and State Commissionaires project support team.

At DTI, we balance continuous growth and innovation with a strong dedication to corporate social responsibility. Join our talented team and be part of a company that values both professional excellence and community impact. Explore the exciting career opportunities awaiting you at DTI!

DTI is committed to hiring and maintaining a diverse workforce. We are an equal opportunity employer making decisions without regard to race, color, religion, sex, national origin, age, veteran status, disability, or any other protected class.