Remote Senior Information Security Analyst (FISMA/NIST RMF)

eSimplicity Inc.; Columbia (MD); Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) plan

Paid time off

Paid holidays

Life and disability insurance

Job summary

eSimplicity is seeking a Senior Information Security Analyst to deliver security compliance, risk management, vulnerability management, and audit support for CMS programs. The role requires deep knowledge of FISMA, RMF, NIST SP 800-53, and CMS ARS to drive secure systems.

The successful candidate will develop audit-ready documentation, coordinate remediation with product and engineering teams, and mentor junior staff while operating in a remote Eastern-time environment.

Qualifications

• 8+ years in information security roles with increasing responsibility.
• Bachelor's degree in CS, IS, Eng, or related field.
• Experience supporting federal systems with FISMA and RMF.
• Experience applying NIST SP 800-53 and CMS ARS controls.
• Experience maintaining System Security Plans, POA&M, and ATO artifacts.
• Experience with vulnerability management and coordinating remediation.
• Ability to obtain Public Trust clearance and US residency 3 of last 5 years.

Responsibilities

• Serve as a senior security advisor to CMS ISSOs, product owners, engineers, infrastructure teams, and program leadership.
• Interpret FISMA, NIST RMF, NIST SP 800-53, CMS ARS, and agency security requirements and translate them into actions.
• Develop, review, and maintain detailed security control implementation statements and supporting evidence.
• Maintain and support ATO artifacts, including SSPs, SIAs, POA&M, risk assessments, contingency plans, and incident response plans.
• Lead Security Impact Analyses for changes to system, app, infra, cloud, data, and config.
• Support security assessments and audits by coordinating evidence collection and remediation actions.
• Review vulnerability and compliance scan results; validate findings; coordinate remediation with teams.
• Develop and review vulnerability docs, remediation plans, POA&M, and risk exception requests.

Skills

FISMA RMF

NIST SP 800-53

CMS ARS

Vulnerability Management

Security Assessments

Audit & Documentation

Cloud Security

DevSecOps

Public Trust Clearance

Education

Bachelor's degree in computer science or related field

Tools

Tenable

Snyk

AWS Security Hub/Inspector

Job description

eSimplicity is seeking a Senior Information Security Analyst to deliver security compliance, risk management, vulnerability management, and audit support for CMS programs. The role requires deep knowledge of FISMA, RMF, NIST SP 800-53, and CMS ARS to drive secure systems.

The successful candidate will develop audit-ready documentation, coordinate remediation with product and engineering teams, and mentor junior staff while operating in a remote Eastern-time environment.