Security Analyst

Brooksource; Lansing (MI); Hybrid; USD 62,000 - 69,000; Full time

Benefits offered by this job

Health insurance

401k plan

Paid time off

Job summary

The ideal candidate has strong experience with NIST security frameworks and controls, translating requirements into practical application-specific directives, and serving as a SME for NIST, SSP, and ATO tasks while mentoring other security professionals across the portfolio.

Qualifications

• 5+ years of professional cybersecurity experience.
• Experience with NIST frameworks, controls, and requirements.
• Experience developing, reviewing, or maintaining SSPs.
• Experience supporting ATO processes.
• Strong technical writing and documentation skills.
• Excellent communication with technical and business stakeholders.

Responsibilities

• Lead development, review, and completion of SSPs across applications.
• Ensure SSPs address applicable security requirements with owners and customers.
• Support applications through the ATO process and establish authorization cadence.
• Translate NIST controls into practical, application-specific requirements.
• Review SSP documentation to identify gaps and remediation needs.
• Develop and maintain security documentation for authorization.
• Explain security requirements to customers and teams; mentor others.
• Learn the organization’s environment and become a trusted SME for NIST, SSP, ATO.
• Identify opportunities to improve SSP/ATO efficiency and consistency.

Skills

NIST frameworks & controls

SSP development & review

ATO processes

Technical writing

Stakeholder communication

Mentoring security teams

Education

Master’s degree in Cybersecurity or related field

Tools

Keylight

GRC platforms

Job description

Location: Lansing, MI - Hybrid on site Monday and Tuesday

$45-$50/Hr

Position Overview

We are seeking an experienced Security Analyst to support security compliance and authorization activities across an enterprise application portfolio. This individual will focus on developing, reviewing, and advancing System Security Plans (SSPs) and Authority to Operate (ATO) activities while helping application teams navigate security requirements and processes.

The ideal candidate will have strong experience working within NIST security frameworks and controls, with a proven ability to translate security requirements into practical requirements for specific applications and environments.

This position will serve as a subject matter expert and mentor across the application portfolio, working directly with customers, application teams, and security stakeholders to bring applications through the appropriate security and authorization cadence.

Key Responsibilities

• Lead and support the development, review, and completion of System Security Plans (SSPs) across the application portfolio.
• Work with application owners and customers to ensure SSPs comprehensively address applicable security requirements.
• Support applications through the Authority to Operate (ATO) process and help establish or restore appropriate authorization cadence.
• Translate NIST requirements and security controls into practical, application-specific requirements and recommendations.
• Review SSP documentation in detail to identify gaps, inconsistencies, and areas requiring additional evidence or remediation.
• Develop and maintain security documentation necessary to advance applications through the authorization process.
• Work directly with customers and application teams to explain security requirements and assist them in addressing deficiencies.
• Learn the organization’s application environment and security processes and become a trusted SME for NIST, SSP, and ATO activities.
• Provide mentorship and guidance to other security professionals and application teams across the portfolio.
• Identify opportunities to improve consistency, efficiency, and repeatability within the SSP and ATO processes.

Required Qualifications

• 5+ years of professional cybersecurity or information security experience.
• Multiple years of hands-on experience working with NIST security frameworks, controls, and requirements.
• Demonstrated experience developing, reviewing, or maintaining System Security Plans (SSPs).
• Experience supporting Authority to Operate (ATO) processes.
• Experience developing and managing Plans of Action and Milestones (POA&Ms).
• Strong understanding of cybersecurity controls and how they apply to applications and enterprise environments.
• Ability to interpret security requirements and translate them into practical, application-specific requirements.
• Strong technical writing and documentation skills.
• Excellent communication skills with the ability to work directly with both technical teams and business/customer stakeholders.
• Ability to work independently while managing multiple applications and security activities simultaneously.
• Demonstrated ability to mentor and provide guidance to other security professionals.

Preferred Qualifications

• Master’s degree in Cybersecurity, Information Security, Computer Science, or a related field.
• Experience working within a State Government or public-sector cybersecurity environment.
• Experience with Keylight or similar GRC/security authorization platforms.
• Experience working with NIST SP 800-53 or related NIST publications.
• Experience supporting enterprise application portfolios with numerous concurrent ATOs.
• Experience working with security control assessments, evidence collection, risk assessments, and remediation activities.
• Relevant cybersecurity certifications such as CISSP, CISM, CRISC, Security+, or equivalent.

Disclaimer

Brooksource, Medasource, and Calculated Hire are part of the Eight Eleven Group family of companies and operate under Eight Eleven Group, LLC. All employees receive the same benefits, policies, and terms of employment.

We are committed to creating an inclusive environment for all employees and applicants. We do not discriminate on the basis of race, color, religion, creed, sex, sexual orientation, gender identity or expression, national origin, ancestry, age, disability, genetic information, marital status, military or veteran status, citizenship, pregnancy (including childbirth, lactation, and related conditions), or any other protected status in accordance with applicable federal, state, and local laws.

Brooksource offers competitive medical, dental, vision, Health Savings Account, Dependent Care FSA, and supplemental coverage with plans that can fit each employee’s needs. We offer a 401k plan that includes a company match and is fully vested after you become eligible, paid time off, sick time, and paid company holidays. We also offer an Employee Assistance Program (EAP) that provides services like virtual counseling, financial services, legal services, life coaching, etc.

Pay Disclaimer

The pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.