Senior Security & Compliance Analyst - FedRAMP/NIST

Endurion; Tampa (FL); On-site; USD 95,000 - 140,000; Full time

Job summary

Endurion is seeking a Security & Compliance Analyst to assess, implement, and monitor security frameworks across cloud and hybrid environments. The role ensures compliance with FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and Zero Trust principles while aligning with DoD identity governance policies.

This opportunity is contingent upon award, with responsibilities including risk assessment, documentation (SSPs/POA&Ms), and remediation strategies to maintain regulatory compliance.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, or related field, or 5+ years in security compliance analysis.
• Experience in security assessments and regulatory adherence for cloud/hybrid infrastructures.
• Familiarity with FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and Zero Trust security principles.

Responsibilities

• Perform security risk assessment, compliance reporting, and remediation strategies.
• Conduct security assessments and prepare compliance documentation (SSPs, POA&Ms).
• Ensure regulatory adherence for cloud and hybrid infrastructures.
• Monitor deployments for RMF, NIST 800-53, and DoD IL4/IL5 compliance.

Skills

Security risk assessment

Compliance reporting

FedRAMP/NIST/DoD RMF

Zero Trust

Documentation

Vulnerability remediation

Cloud & hybrid environments

Microsoft Purview

AWS Security Hub

Nessus

Splunk Enterprise Security

Education

Bachelor's degree in Cybersecurity/Info Assurance

CISA (Preferred)

CISSP (Preferred)

CompTIA Security+ (Preferred)

Tools

Microsoft Purview

AWS Security Hub

Nessus

Splunk Enterprise Security

Job description

Endurion is seeking a Security & Compliance Analyst to assess, implement, and monitor security frameworks across cloud and hybrid environments. The role ensures compliance with FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and Zero Trust principles while aligning with DoD identity governance policies.

This opportunity is contingent upon award, with responsibilities including risk assessment, documentation (SSPs/POA&Ms), and remediation strategies to maintain regulatory compliance.