Security & Compliance Analyst (Access Management)

SOS International LLC; Town of Florida (NY); On-site; USD 79,000 - 165,000; Full time

Job summary

SOSi is seeking a Security & Compliance Analyst in Doral, FL to support a DoD customer with a structured approach to data governance and interoperability. The role develops and sustains a scalable, federated data ecosystem enabling real-time information sharing and analytics.

The ideal candidate holds an active TS-SCI clearance and a Bachelor's degree in a related field (or 5 years of equivalent security experience).

Qualifications

• Active TS-SCI clearance required.
• Bachelor’s degree or 5 years security/compliance experience.
• Experience implementing controls across cloud and on‑prem environments.

Responsibilities

• Monitor Kubernetes and data lake deployments for RMF/NIST 800-53 and DoD IL4/IL5 compliance.
• Maintain dashboards and conduct vulnerability scans to support ATO and risk posture.
• Prepare SSPs, SARs, and POA&Ms reflecting architecture or risk changes.
• Enforce encryption, logging, and IAM policies across the data layer.
• Submit the Security & Compliance Assessment Report with remediation actions.

Skills

TS-SCI clearance

NIST 800-53

IAM

SIEM (Splunk)

Zero-trust architecture

Vulnerability assessment

Security audits

Cloud & on-prem security

RMF / DoD IL4/IL5

Education

Bachelor’s degree in Cybersecurity/Information Assurance/CS or 5 years equivalent experience

Tools

Splunk

SIEM solutions

Job description

Doral, FL, USA

Full-time

Clearance Requirement: Top Secret/SCI

Compensation: USD 79451 - USD 165013 - yearly

Company Description

Founded in 1989, SOSi is among the largest private, founder-owned technology and services integrators in the defense and government services industry. We deliver tailored solutions, tested leadership, and trusted results to enable national security missions worldwide.

Job Description

This position is contingent upon contract award

SOSi is seeking a Security & Compliance Analyst to support mission requirements for a structured approach to further develop, integrate, and sustain a scalable, federated data ecosystem that enhances interoperability, governance, and mission-driven analytics for a DoD customer. The primary objective of the program is to bridge the operational gaps between DoD, IC, interagency, and non-traditional international partners to enable real-time information sharing, dynamic data integration, and mission-tailored analytical capabilities.

Essential Job Duties:

• Monitor and validate Kubernetes and data lake deployments for compliance with RMF, NIST 800-53, and DoD IL4/IL5 requirements, in collaboration with agency cybersecurity teams.
• Maintain continuous monitoring dashboards and conduct vulnerability scans of deployed infrastructure and workloads, supporting the agency’s ATO process and risk posture.
• Prepare and update system security documentation—including SSPs, SARs, POA&Ms—to reflect changes to architecture, controls, or risk conditions under other work orders.
• Enforce encryption, logging, and identity access policies (IAM, RBAC, audit logging) to maintain traceability and accountability across the Kubernetes-based data layer.
• Submit the Security & Compliance Assessment Report, providing a summary of control effectiveness, findings, and recommended remediation actions.

Qualifications

Minimum Requirements:

• Active TS-SCI Clearance.
• Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, or a related field, or five (5) years of equivalent experience in security and compliance roles.
• Knowledge and capability to implement, monitor, and enforce security policies, frameworks, and compliance controls across cloud-based and on-premises environments.
• Proficient in NIST 800-53, FedRAMP, DoD IL-4/5 security policies, and risk assessment methodologies.
• Strong understanding of identity and access management (IAM), security monitoring tools (Splunk, SIEM solutions), zero-trust architecture, and vulnerability assessment frameworks is required.
• Demonstrated experience in conducting security audits, assessing system compliance with DoD cybersecurity policies, and implementing security controls in cloud and hybrid environments.
• Experience with security automation, endpoint protection, and incident response processes is required.

Preferred Qualifications:

• Desired but not required certifications include Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or AWS Certified Security – Specialty.

Additional Information

Working Conditions:

• Normal office conditions.

Working at SOSi: All interested individuals will receive consideration and will not be discriminated against for any reason.

SOSi is an equal employment opportunity employer and affirmative action employer. All interested individuals will receive consideration and will not be discriminated against on the basis of race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity, genetic information, or protected veteran status. SOSi takes affirmative action in support of its policy to advance diversity and inclusion of individuals who are minorities, women, protected veterans, and individuals with disabilities.