Senior Information Assurance Analyst — FedRAMP & A&A Expert

Paragon; Washington; On-site; USD 110,000 - 160,000; Full time

Job summary

Paragon seeks an Information Assurance Analyst Senior to lead security assessments for federal programs in Washington, DC. You will apply A&A processes, oversee risk assessments, and advise on improving the defensive posture across information systems.

You will collaborate with security teams, monitor networks for breaches, and develop test security solutions and training materials to raise awareness. A CISSP or CISM and federal IT experience are required.

Qualifications

• CISSP and/or CISM certification required.
• Senior-level cybersecurity expertise.
• Experience supporting Federal IT organizations in Assessments and Authorizations (A&A).
• Experience conducting risk assessments and vulnerability assessments.
• Experience with the Federal A&A processes.
• Experience monitoring networks and systems for security breaches or intrusions.
• Experience developing test security solutions using industry standard criteria.
• Experience developing training and awareness materials.

Responsibilities

• Acts as a SME for Federal Assessments & Authorizations (A&A); provides sound advice to lower risk and improve defensive posture.
• Works to resolve complex problems and reports progress to management.
• Devises improvements to current procedures and develops models of possible future configurations.
• Performs complex workflow analysis and recommends quality improvements.

Skills

CISSP

CISM

Senior cybersecurity expertise

Federal IT experience

Risk assessments

Vulnerability assessments

A&A processes

Network monitoring

Test security solutions

Training & awareness

Tools

CSAM

Job description

Paragon seeks an Information Assurance Analyst Senior to lead security assessments for federal programs in Washington, DC. You will apply A&A processes, oversee risk assessments, and advise on improving the defensive posture across information systems.

You will collaborate with security teams, monitor networks for breaches, and develop test security solutions and training materials to raise awareness. A CISSP or CISM and federal IT experience are required.