Senior FISMA Analyst - Federal GovCon Career Growth

Systems Engineering Solutions Corporation; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Systems Engineering Solutions Corporation is seeking a senior FISMA Security Analyst to support federal compliance and governance across systems under the task order. The role reports to the XGen DIGIT Director of Enterprise Security and focuses on implementing NIST RMF and FISMA controls.

You will collaborate with government and contractor teams to advance security posture, APIs, automation risk, and continuous monitoring, leveraging 800-53 Rev.5 and related standards to ensure continuous

Qualifications

• Provides technical support to divisions building security architecture and supporting design and implementation of information technology security systems
• Leads developing, implementing, and maintaining enterprise-wide information security capabilities
• Supports the execution of the NIST Risk Management Framework (RMF) lifecycle, including control implementation, assessment, authorization, and continuous monitoring
• Assesses cybersecurity risks associated with APIs, integrations, data exchanges, and automated workflows

Responsibilities

• Provides technical support to divisions and branches developing security architecture and supporting design and implementation of information technology security systems
• Leads developing, implementing, and maintaining enterprise-wide information security capabilities
• Supports continuous monitoring activities, including vulnerability management, control assessments, risk tracking, remediation validation, and reporting to stakeholders
• Assesses cybersecurity risks associated with APIs, integrations, data exchanges, and automated workflows

Skills

NIST SP 800-53 Rev. 5 & RMF

API & RPA security risk assessment

FISMA authorization packages (SSP, SAR

Continuous monitoring & vulnerability

Job description

Location Remote

Company Systems Engineering Solutions Corporation

This is a senior-level federal cybersecurity compliance role targeting professionals with 10–15 years of experience, specifically in FISMA, NIST RMF, and continuous monitoring frameworks. The depth of scope — spanning API security, RPA risk management, and emerging tech (AI/ML automation) — signals this is a high-impact individual contributor or technical lead position.

Compensation context: No salary is disclosed, but comparable SME FISMA Analyst roles on federal contracts typically range from $120,000–$160,000 annually depending on clearance level, location, and contract vehicle. Public Trust (rather than Secret/TS) roles tend to sit at the lower end of federal contract pay scales.

Skills developed in this role are in high demand:

• NIST SP 800-53 Rev. 5 and RMF lifecycle management — foundational for all federal IT work
• API and RPA security risk assessment — rapidly growing specialization as agencies adopt automation
• FISMA authorization packages (SSP, SAR, POA&M) — niche but highly valued in govcon
• Continuous monitoring and vulnerability management — transferable to private sector

Green flags: Exposure to cutting-edge automation and AI/ML security at the federal level, broad multi-system scope, and remote flexibility are positives. The preferred CISSP/CISM certifications are a strong career investment.

Watch points: No salary transparency, and the role is tied to a task order — meaning contract renewals could affect job stability. Candidates should ask about contract duration and pipeline before accepting.

SES is seeking a SME FISMA Security Analyst to support the federal compliance and governance requirements for all systems supported by the Task Order. The purpose of this role is to assist the XGen DIGIT Director of Enterprise Security in the management and execution of GSA IT Enterprise Security Management and IT Continuity Management Services.

The team is comprised of best-in-class technology partners leveraging forward-leaning technologies and best practices to transform GSA's IT capabilities and shift offerings to provide a more flexible service delivery model, completing the agency's shift to a fully digital experience along with its adoption of advanced, emerging technologies such as intelligent automation, artificial intelligence, and machine learning.

Requirements

The FISMA Security Analyst shall perform the following activities (including but not limited to):

• Provides technical support to divisions and branches developing security architecture and supporting design and implementation of information technology security systems
• Supports research of new security products and services and supports the rollout of enterprise security solutions that leverage single Department-wide license agreements with new or existing vendors and service providers
• Leads developing, implementing, and maintaining enterprise-wide information security capabilities
• Analyzes the enterprise business models and IT systems to determine security risks and risk management considerations
• Defines enterprise- and system-level security requirements
• Supports the implementation and assessment of security and privacy controls in accordance with NIST SP 800-53 Revision 5 and applicable federal control baselines
• Supports the execution of the NIST Risk Management Framework (RMF) lifecycle, including control implementation, assessment, authorization, and continuous monitoring
• Assists with the development, review, and maintenance of RMF and FISMA documentation, including System Security Plans, Security Assessment Reports, Plans of Action and Milestones, risk assessments, control implementation statements, procedures, related governance documentation, and authorization packages
• Proposes technical solutions for systems and application-level security architecture and design to reduce risk and support compliance objectives
• Supports continuous monitoring activities, including vulnerability management, control assessments, risk tracking, remediation validation, and reporting to stakeholders
• Assesses cybersecurity risks associated with APIs, integrations, data exchanges, and automated workflows