Remote Security Ops Analyst — FedRAMP & IR

RISCPoint Advisory Group; United States; Teletrabalho; USD 80 000 - 120 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Base Salary + Bonus

Company Paid Health Insurance

Company Paid Dental Insurance

Company Paid Vision Insurance

401k with 3% Company Contribution

Resumo da oferta

RISCPoint Advisory Group seeks a Security Operations Analyst to support and enhance FedRAMP-compliant environments. You will execute continuous monitoring, vulnerability management, and security operations, coordinating with engineering and compliance to maintain control effectiveness.

You will handle incident response, threat hunting, and ConMon reporting, while maintaining SSP updates and POA&Ms to strengthen the security posture of authorized cloud environments.

Qualificações

• 2-4 years in security operations, incident response, or SOC analyst role.
• 1-2 years AWS GovCloud experience.
• Experience with vulnerability management and remediation.
• Hands-on with SIEM platforms and security monitoring tools.
• Experience analyzing security logs and investigating incidents.

Responsabilidades

• Maintain monitoring and response using security tooling.
• On-call rotation for rapid incident response.
• Incident response notification and communications.
• Perform weekly vulnerability scans and remediation tracking.
• Monitor SIEM/IDS/IPS and maintain dashboards and metrics.
• Support FedRAMP Continuous Monitoring and PSBM activities.

Conhecimentos

SOC analyst

incident response

AWS GovCloud

Vulnerability management

SIEM

Formação académica

Security+ or DoD 8570 IAT Level II

CISSP/CCSP or GIAC GCIH (Preferred)

AWS Security Specialist / Architect (Preferred)

Ferramentas

Tenable Nessus

Qualys

Rapid7

AWS GuardDuty

CloudTrail

Descrição da oferta de emprego

RISCPoint Advisory Group seeks a Security Operations Analyst to support and enhance FedRAMP-compliant environments. You will execute continuous monitoring, vulnerability management, and security operations, coordinating with engineering and compliance to maintain control effectiveness.

You will handle incident response, threat hunting, and ConMon reporting, while maintaining SSP updates and POA&Ms to strengthen the security posture of authorized cloud environments.