Senior Security Analyst – A&A & NIST Assessments (Remote)

ITC Federal, LLC; Gaithersburg, Northern (MD, KY); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health, Dental and Vision

401(k)

FSA

11 Paid Federal Holidays

PTO

Education reimbursement

Job summary

ITC Federal, LLC is seeking a Senior Security Analyst/A&A SME to support NIST systems in a fully remote capacity. The role focuses on Security Assessment & Authorization activities, vulnerability analysis, and reporting to senior management within a federal contracting framework.

The ideal candidate brings 5–8 years implementing NIST 800 Series, RMF experience, and CISSP/CISM/CISA credentials or advanced degree, with hands-on experience using security tools like RSA Archer, Tenable, and

Qualifications

• 5–8 years implementing NIST 800 Series.
• Experience with RMF, interviewing, examining and testing controls.
• Security Test & Evaluation and Security Assessment Reports for senior management.
• Ability to present risk and remediation plans to management.

Responsibilities

• Conduct A&A activities for NIST systems.
• Collaborate with NIST staff to remediate risks and provide solutions.
• Coordinate/conduct vulnerability scans and analyze results.
• Prepare Security Assessment Reports with technical and policy aspects.
• Review and update A&A packages based on feedback.

Skills

NIST RMF

Vulnerability analysis

Security assessment reports

Documentation & reporting

Oral & written communication

Education

CISSP

CISM

CISA

Advanced degree

Tools

RSA Archer

CSAM

Tenable

WebInspect

AppDetective

Job description

ITC Federal, LLC is seeking a Senior Security Analyst/A&A SME to support NIST systems in a fully remote capacity. The role focuses on Security Assessment & Authorization activities, vulnerability analysis, and reporting to senior management within a federal contracting framework.

The ideal candidate brings 5–8 years implementing NIST 800 Series, RMF experience, and CISSP/CISM/CISA credentials or advanced degree, with hands-on experience using security tools like RSA Archer, Tenable, and