Remote Senior Security Analyst – NIST A&A Expert

ITC Federal, Inc.; Gaithersburg (MD); Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health

Dental and Vision

401(k)

Flexible Spending Account (FSA)

11 Paid Federal Holidays

PTO

education reimbursement

Job summary

ITC Federal, Inc. seeks a Senior Security Analyst/A&A SME to lead Assessment & Authorization activities for NIST systems in a fully remote role.

You will leverage expertise in NIST RMF, security policy, and vulnerability management to support government missions and regulatory compliance. Ideal candidates bring 5–8 years of relevant federal experience, CISSP/CISM/CISA or equivalent, and hands-on use of security tools such as RSA Archer, Tenable, and WebInspect.

Qualifications

• 5-8 years of experience implementing the NIST 800-series publications.
• Experience with NIST RMF risk management activities including interviewing, examining and testing control sets.
• Ability to create and update System Security Plans, Contingency Plans, Privacy Threshold Assessments and related docs.
• Delivering risk and vulnerability briefings to management and government customers.

Responsibilities

• Conduct A&A activities for NIST systems individually or as part of a team.
• Collaborate with NIST staff to remediate risks and provide policy-driven solutions.
• Support remediation plans for A&A findings and guide ISSOs on documentation.
• Coordinate/conduct vulnerability scans and analyze results.
• Prepare Security Assessment Reports covering technical and policy aspects.
• Review and update A&A packages based on management feedback.

Skills

A&A expertise

NIST RMF

Vulnerability assessment

Technical writing

Customer service

Policy guidance

Education

Advanced degree in CS or related field

CISSP/CISM/CISA certification

Tools

RSA Archer

CSAM

Tenable

WebInspect

AppDetective

Job description

ITC Federal, Inc. seeks a Senior Security Analyst/A&A SME to lead Assessment & Authorization activities for NIST systems in a fully remote role.

You will leverage expertise in NIST RMF, security policy, and vulnerability management to support government missions and regulatory compliance. Ideal candidates bring 5–8 years of relevant federal experience, CISSP/CISM/CISA or equivalent, and hands-on use of security tools such as RSA Archer, Tenable, and WebInspect.