Security Analyst: FedRAMP & Cloud Compliance Lead

Insight Global; Herndon (VA); On-site; USD 120,000 - 190,000; Full time

Job summary

Insight Global is seeking a Security Analyst to join its SAP NS2 cyber team in Herndon, VA. The role focuses on FedRAMP documentation, CCM, and A&A activities, advising stakeholders on policy changes and risk mitigation strategies.

Candidates should have extensive container, cloud, and vulnerability expertise, with scripting for automation. The position requires onsite work three days a week, strong knowledge of NIST RMF, and hands-on experience with AWS cloud environments.

Qualifications

• 6+ years in a cybersecurity monitoring position.
• Experience parsing logs and security data for vulnerability analysis.
• Experience supporting cloud environments specifically AWS.
• Knowledge of attack vectors and exploitable vulnerabilities.
• Ability to develop automation scripts to reduce manual workload.

Responsibilities

• Assist in creation, update, and maintenance of FedRAMP security documentation and CCM requirements.
• Advise stakeholders on changing regulatory policies (NIST RMF, DISA SRG).
• Document risk mitigation options with benefits/drawbacks per FedRAMP and SAP NS2 policy.
• Apply security frameworks (FISMA, NIST SP 800) to cloud initiatives.
• Develop/update policies to implement FedRAMP and NIST 800-171.
• Identify and assess cloud system state, RMF status, and patching mechanisms.
• Onsite presence required 3x per week in Herndon, VA.

Skills

Container scanning

Python

PowerShell

Bash

AWS

Vulnerability analysis

Risk assessment

Tools

Docker

Kubernetes

Security scanning tools

Job description

Insight Global is seeking a Security Analyst to join its SAP NS2 cyber team in Herndon, VA. The role focuses on FedRAMP documentation, CCM, and A&A activities, advising stakeholders on policy changes and risk mitigation strategies.

Candidates should have extensive container, cloud, and vulnerability expertise, with scripting for automation. The position requires onsite work three days a week, strong knowledge of NIST RMF, and hands-on experience with AWS cloud environments.