Senior Information Security Analyst

BlueWater Federal Solutions Inc.; Germantown (MD); On-site; USD 165,000 - 190,000; Full time

Benefits offered by this job

Health Insurance

401k Match

Stock Purchase

Life Insurance

Paid Time Off

Job summary

BlueWater Federal Solutions Inc. seeks a Sr Information Security Analyst to support the DOE EHSS AICS program, focusing on secure operations, modernization, and DevSecOps across EHSS environments.

The role emphasizes implementing NIST-based controls, conducting SA&A activities, and producing authorization artifacts while mitigating vulnerabilities and supporting incident response in cloud and on-premises contexts.

Qualifications

• Bachelor's degree in Cybersecurity or similar field.
• Active TS clearance with ability to obtain a higher clearance.
• Minimum 4 years securing government systems.

Responsibilities

• Implement and assess controls under NIST SP 800-37/800-53 and related standards.
• Develop ATO packages, SSPs, risk statements, and authorization artifacts.
• Analyze vulnerabilities, track POA&Ms, and verify closure.
• Support incident response, cloud security, and continuous monitoring.

Skills

NIST SP 800-53

Zero Trust

Vulnerability Mgmt

Incident Response

Cloud Security

SA&A

Risk Management

CISSP/GSEC/GISP

Education

Bachelor's degree in Cybersecurity

Job description

Job Description

Overview

BlueWater Federal is looking for a Sr Information Security Analyst to support the DOE EHSS Application, Infrastructure, and Cybersecurity Support (AICS) program

AICS enables secure, reliable, and data-driven operations across the DOE enterprise through application modernization, DevSecOps, Zero Trust implementation, continuous monitoring, and infrastructure sustainment supporting EHSS's environment, health, safety, security, and classification missions.

Responsibilities

• Implement and assess controls under NIST SP 800-37/800-53, CNSSI, FISMA, FedRAMP, DOE directives, DISA STIGs, and CIS Benchmarks.
• Plan and execute security assessments, SA&A, control testing, technical verification, and system, web, and configuration scanning.
• Develop ATO packages, SSPs, assessment reports, risk statements, corrective actions, contingency/COOP plans, and authorization artifacts.
• Analyze vulnerabilities, recommend remediation, track POA&Ms, verify closure, and elevate risks.
• Support incident response, classified spillage, cloud security, CDM/continuous monitoring, and Zero Trust Architecture.
• Support policy development, SCRM reviews, data calls, annual reviews, training, and coordination with owners, administrators, developers, EITS, and iJC3.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, or similar field.
• Must have an active Top Secret clearance with the ability to obtain a Q clearance
• 6 years of experience can be substituted for the bachelor's degree (included as part of the experience requirement, not additional).
• Minimum 4 years securing government systems and information assets.
• Knowledge of SA&A, NIST SP 800-37, NIST SP 800-53, CNSSI, and federal requirements.
• Understanding of CDM, Zero Trust, cloud systems, incident response, vulnerability management, and risk documentation.
• GISP, CISSP, GSEC, or equivalent required.

BlueWater Federal is proud to be an Equal Opportunity Employer. All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law. BlueWater Federal is a VEVRAA federal contractor and we request priority referral of veterans.

We offer a competitive health and wellness benefits package, including medical, dental, and vision coverage. Our competitive compensation package includes generous 401k matching, employee stock purchase program, and life insurance options, and time off with pay. Salary range: 165-190K