Security Operations Analyst

RISCPoint Advisory Group; United States; Remote; USD 80,000 - 120,000; Full time

Benefits offered by this job

Base Salary + Bonus

Company Paid Health Insurance

Company Paid Dental Insurance

Company Paid Vision Insurance

401k with 3% Company Contribution

Job summary

RISCPoint Advisory Group seeks a Security Operations Analyst to support and enhance FedRAMP-compliant environments. You will execute continuous monitoring, vulnerability management, and security operations, coordinating with engineering and compliance to maintain control effectiveness.

You will handle incident response, threat hunting, and ConMon reporting, while maintaining SSP updates and POA&Ms to strengthen the security posture of authorized cloud environments.

Qualifications

• 2-4 years in security operations, incident response, or SOC analyst role.
• 1-2 years AWS GovCloud experience.
• Experience with vulnerability management and remediation.
• Hands-on with SIEM platforms and security monitoring tools.
• Experience analyzing security logs and investigating incidents.

Responsibilities

• Maintain monitoring and response using security tooling.
• On-call rotation for rapid incident response.
• Incident response notification and communications.
• Perform weekly vulnerability scans and remediation tracking.
• Monitor SIEM/IDS/IPS and maintain dashboards and metrics.
• Support FedRAMP Continuous Monitoring and PSBM activities.

Skills

SOC analyst

incident response

AWS GovCloud

Vulnerability management

SIEM

Education

Security+ or DoD 8570 IAT Level II

CISSP/CCSP or GIAC GCIH (Preferred)

AWS Security Specialist / Architect (Preferred)

Tools

Tenable Nessus

Qualys

Rapid7

AWS GuardDuty

CloudTrail

Job description

RISCPoint Advisory Group Security Operations Analyst Remote Full time

RISCPoint is seeking a Security Operations Analyst responsible for supporting and maintaining the ongoing security and compliance posture of FedRAMP-authorized information systems.

About RISCPoint Advisory Group

RISCPoint was founded with the vision to seamlessly integrate with your team, utilizing only high-performing professionals with deep technical and operational experience to fulfill your security and compliance needs.

Our diverse team has served companies ranging from Fortune 10 to pre-series A start-ups. Our first priority is to understand your specific needs, only recommending services we are certain will deliver a meaningful return on investment. We provide business-focused risk, technology and cybersecurity solutions, specifically tailored to your organization.

Description

Position Overview

RISCPoint is seeking a Security Operations Analyst responsible for supporting and maintaining the ongoing security and compliance posture of FedRAMP-authorized information systems through the execution of continuous monitoring, vulnerability management, and security operations activities. This role includes proactively identifying, analyzing, and responding to security events and incidents, performing regular vulnerability assessments and remediation tracking, and ensuring system configurations, controls, and documentation remain aligned with FedRAMP, NIST, and organizational security requirements. The Security Operatins Analyst collaborates with engineering, compliance, and operational teams to validate control effectiveness, support audit and assessment activities, and maintain accurate system security documentation, including SSP updates, POA&M management, and risk reporting. This position plays a critical role in safeguarding federal data, ensuring regulatory compliance, and strengthening the overall resilience and security maturity of authorized cloud environments.

Key Responsibilities

Security Operations:

• Utilize and maintain automated security tooling for monitoring and response within customer environments
• On-call rotation to provide rapid response to potential security incidents
• Incident response notification and communications
• Conduct routine vulnerability assessments and provide remediation guidance
• Perform weekly vulnerability scans using approved scanning tools
• Analyze vulnerability scan results and coordinate remediation efforts
• Monitor security alerts from SIEM, IDS/IPS, and other security tools
• Track security metrics and maintain compliance dashboards
• Maintain FedRAMP Continuous Monitoring compliance including Cloud Security Posture Management

Compliance & Reporting:

• Conduct quarterly threat hunting exercises
• Assist with monthly ConMon reporting deliverables
• Maintain Plan of Action & Milestones (POA&M) documentation
• Support 3PAO assessments and audits

Security Tools Management:

• Configure and maintain security monitoring platforms
• Tune security tools to reduce false positives
• Develop custom detection rules and alerts
• Create security dashboards and reports

Qualifications

Experience:

• 2-4 years in security operations, incident response, or SOC analyst role
• 1-2 years working in AWS, particularly AWS GovCloud
• Experience with vulnerability management and remediation
• Hands-on experience with SIEM platforms and security monitoring tools
• Experience analyzing security logs and investigating incidents

Certifications:

• Security+ or equivalent DoD 8570 IAT Level II certification
• One of: ISC2 CISSP/CCSP, GIAC GCIH (Preferred)
• One of: AWS Security Specialist, AWS Certified Solutions Architect – Associate (Preferred)

Technical Skills:

• Security Tools: Tenable Nessus, Qualys, Rapid7, other vulnerability scanners
• Cloud Security: AWS GuardDuty, AWS Security Hub, CloudTrail, VPC Flow Logs, AWS IAM
• Endpoint Security: CrowdStrike, Carbon Black, Microsoft Defender
• Incident Response: Experience with IR frameworks (NIST 800-61)

COMPENSATION & BENEFITS

• Base Salary + Bonus
• Company Paid Health Insurance
• Company Paid Dental Insurance
• Company Paid Vision Insurance
• 401k with 3% Company Contribution (Traditional & Roth Options)