Junior Cyber Security Analyst (R-00168)

Remote; San Francisco (CA); On-site; USD 65,000 - 105,000; Full time

Benefits offered by this job

Competitive salary

Best in class medical coverage

100% of medical premiums covered by <i

Job summary

True Zero Technologies, a veteran-owned small business, seeks a Junior Cyber Security Assurance Analyst to support security assessments of cloud-based, NIST-regulated systems for U.S. Federal Government clients.

You will coordinate with ISSO, System Owner, and cybersecurity teams to document controls, track deficiencies, and assist with release/change management, testing, and production readiness. This role includes competitive salary, excellent medical coverage, 401k with company match, and

Qualifications

• BA or BS degree, or at least 4 years of related field experience.
• Minimum 1+ years supporting or conducting federal system security assessments.
• Minimum 1+ years developing formal security documentation.
• Minimum 1+ years assessing and remediating security findings.
• Minimum 1+ years exposure to the SDLC and release/change management.
• Thorough knowledge of NIST SP 800-series security guidelines.
• Active clearance or ability and willingness to submit for a clearance.

Responsibilities

• Provide support for system security assessments of a cloud-based, NIST-regulated system.
• Define, document, and deliver security artifacts demonstrating control compliance.
• Remediate and track deficiencies; support continuous diagnostic and monitoring programs.
• Support security work stream within release/change management processes.
• Coordinate security scanning, testing, reporting, production readiness, and post-implementation support.

Skills

NIST SP 800-Series

Security assessments

Documentation

Team collaboration

Education

BA or BS degree

4+ years related experience

Tools

Vulnerability management

Forensics/tools

Job description

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that said outcomes begin and end with our people, and that is what we have built, a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top tier services to our customers. In 2023, True Zero was recognized as a “Best Places to Work” in two categories ("Prosperous and Thriving" ($5MM – $50MM in gross revenue) and "Mid-Atlantic Region" (DC, DE, MD, NC, VA, WV)) and in 2022, was recognized as one of Inc. Magazine’s Top 5000 Fastest Growing Companies.

The Junior Cyber Security Assurance Analyst will be responsible for providing support for system security assessments of a cloud-based, NIST-regulated systems. Works with technical and functional teams to define, document, and deliver security documentation and artifacts that demonstrate compliance with required security controls. Supports the remediation and tracking of identified deficiencies and works with the Security team to support continuous diagnostic and monitoring programs as needed. Supports the security work stream within the system release/change management process. Reviews planned system changes, helps identify and document security impacts, helps coordinate security scanning, testing, reporting as well as production readiness and post implementation support activities.

Successful candidates will work closely with U.S. Federal Government clients, including Information System Security Officers (ISSO), System Owner, Cyber security team, and other groups as needed on release related activities. Updates established work plans for Security release activities.

Qualification Requirements

• Implement, administer, and use cybersecurity tools, systems and applications; develop policies, standards, and guidelines to ensure secure enterprise-wide operations, performance and resiliency.

• Deploy and secure security systems, application layer and traditional firewalls, vulnerability management and forensics utilities, and other infrastructure deployed and maintained by the Information Security Office.

• Develop plans to safeguard information against unauthorized access modification, and destruction, and ensure organizational continuity of operations.

• Monitor, research, and respond to cyber related events and incidents such as malicious code detection, intrusion, detection, system configuration, and patch management issues.

• Conduct risk assessments, audits, and validate that system functionality, and security controls are implemented appropriately according to policy and industry best practices.

• Conduct cybersecurity training and outreach organization-wide.

Position Requirements

• BA or BS degree, or at least 4 years of experience in related field

• Minimum 1+ years supporting OR conducting federal system security assessments

• Minimum 1+ years developing formal security documentation

• Minimum 1+ years assessing and remediating security findings

• Minimum 1+ years exposure to the SDLC

• Minimum 1+ years experience with Release Management or Change Management

• Thorough knowledge of NIST SP 800-series security guidelines

• Active clearance, or ability and willingness to submit for a clearance may be required

• Approved to work in the United States

• Excellent written and oral communication skills

• Ability to work well in a team environment

We’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you’ll enjoy:

• Competitive salary, paid twice per month

• Best in class medical coverage

• 100% of medical premiums covered by True Zero

• Company wide new business incentive programs

• Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)

• 3 weeks of PTO starting + 11 Paid Holidays Annually

• 401k Program with 100% company match on the first 4%

• Monthly reimbursement of Cell Phone and Home Internet costs

• Paternity/Maternity Leave

• Investment in training and certifications to broaden and deepen your technical skills