Senior Information Security Analyst

RiseMe; Germantown (MD); On-site; USD 165,000 - 190,000; Full time

Benefits offered by this job

Health and wellness benefits

401k matching

Employee stock purchase program

Life insurance

Paid time off

Job summary

BlueWater Federal is seeking a Sr Information Security Analyst to support the DOE EHSS AICS program, focusing on secure, compliant operations across government environments.

The role centers on risk management, NIST-based control assessment, SA&A, and incident response, with a Top Secret clearance and possibility of a higher clearance. You'll collaborate with cross-functional teams to sustain secure cloud and on-premise infrastructure.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, or similar field.
• Active Top Secret clearance with the ability to obtain a Q clearance.
• 6 years of experience can be substituted for the bachelor’s degree (included as part of the experience requirement, not additional).
• Minimum 4 years securing government systems and information assets.
• Knowledge of SA&A, NIST SP 800-37, NIST SP 800-53, CNSSI, and federal requirements.
• Understanding of CDM, Zero Trust, cloud systems, incident response, vulnerability management, and risk documentation.
• GISP, CISSP, GSEC, or equivalent required.

Responsibilities

• Implement and assess controls under NIST SP 800-37/800-53, CNSSI, FISMA, FedRAMP, DOE directives, DISA STIGs, and CIS Benchmarks.
• Plan and execute security assessments, SA&A, control testing, technical verification, and system, web, and configuration scanning.
• Develop ATO packages, SSPs, assessment reports, risk statements, corrective actions, contingency/COOP plans, and authorization artifacts.
• Analyze vulnerabilities, recommend remediation, track POA&Ms, verify closure, and elevate risks.
• Support incident response, classified spillage, cloud security, CDM/continuous monitoring, and Zero Trust Architecture.
• Support policy development, SCRM reviews, data calls, annual reviews, training, and coordination with owners, administrators, developers, EITS, and iJC3.

Skills

NIST SP 800-37/800-53

FISMA

CNSSI

Gov't security requirements

SA&A

Zero Trust

Incident response

Vulnerability management

Cloud security

DISA STIGs

Education

Bachelor's degree in Cybersecurity, Information Assurance, or similar field

Tools

CIS Benchmarks

DISA STIGs

Job description

Overview

BlueWater Federal is looking for a Sr Information Security Analyst to support the DOE EHSS Application, Infrastructure, and Cybersecurity Support (AICS) program

AICS enables secure, reliable, and data-driven operations across the DOE enterprise through application modernization, DevSecOps, Zero Trust implementation, continuous monitoring, and infrastructure sustainment supporting EHSS’s environment, health, safety, security, and classification missions.

Responsibilities

• Implement and assess controls under NIST SP 800-37/800-53, CNSSI, FISMA, FedRAMP, DOE directives, DISA STIGs, and CIS Benchmarks.
• Plan and execute security assessments, SA&A, control testing, technical verification, and system, web, and configuration scanning.
• Develop ATO packages, SSPs, assessment reports, risk statements, corrective actions, contingency/COOP plans, and authorization artifacts.
• Analyze vulnerabilities, recommend remediation, track POA&Ms, verify closure, and elevate risks.
• Support incident response, classified spillage, cloud security, CDM/continuous monitoring, and Zero Trust Architecture.
• Support policy development, SCRM reviews, data calls, annual reviews, training, and coordination with owners, administrators, developers, EITS, and iJC3.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, or similar field.
• Must have an active Top Secret clearance with the ability to obtain a Q clearance
• 6 years of experience can be substituted for the bachelor’s degree (included as part of the experience requirement, not additional).
• Minimum 4 years securing government systems and information assets.
• Knowledge of SA&A, NIST SP 800-37, NIST SP 800-53, CNSSI, and federal requirements.
• Understanding of CDM, Zero Trust, cloud systems, incident response, vulnerability management, and risk documentation.
• GISP, CISSP, GSEC, or equivalent required.

BlueWater Federal is proud to be an Equal Opportunity Employer. All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law. BlueWater Federal is a VEVRAA federal contractor and we request priority referral of veterans.

We offer a competitive health and wellness benefits package, including medical, dental, and vision coverage. Our competitive compensation package includes generous 401k matching, employee stock purchase program, and life insurance options, and time off with pay. Salary range: 165-190K