Information Security Analyst
Required skills
- Top Secret clearance
- Q clearance
- NIST SP 800-37
- NIST SP 800-53
- CNSSI
- DISA STIGs
- CIS Benchmarks
- CDM
- Zero Trust
- cloud assessments
Nice to have
- DOE EHSS Application
- Infrastructure
- Cybersecurity Support
- AICS program
- application modernization
- DevSecOps
Role summary
BlueWater Federal seeks an Information Security Analyst to support the DOE EHSS AICS program. This role involves implementing and testing security safeguards, supporting Security Assessment & Authorization (SA&A) using various frameworks like NIST SP 800-37/800-53, and documenting findings. Responsibilities include developing cybersecurity plans, analyzing scans, managing vulnerabilities, and supporting initiatives like Zero Trust and incident response. The position requires a Bachelor's degree in IT/Cybersecurity or equivalent experience, an active Top Secret clearance, and relevant certifications such as CISSP, GISP, or GSEC.
BlueWater Federal is looking for an Information Security Analyst to support the DOE EHSS Application, Infrastructure, and Cybersecurity Support (AICS) program
AICS enables secure, reliable, and data-driven operations across the DOE enterprise through application modernization, DevSecOps, Zero Trust implementation, continuous monitoring, and infrastructure sustainment supporting EHSS’s environment, health, safety, security, and classification missions.
Responsibilities
- Implement and test safeguards protecting confidentiality, integrity, and availability of DOE EHSS systems and data.
- Support SA&A using NIST SP 800-37/800-53, CNSSI, DOE requirements, DISA STIGs, CIS Benchmarks, and approved tools.
- Document test results, recommend corrective actions, residual risks, risk assessments, and POA&M updates.
- Develop and maintain cybersecurity plans, SSPs, COOP/contingency plans, test plans, and authorization evidence.
- Analyze scans, track remediation, support annual reviews, and coordinate evidence with owners, administrators, and developers.
- Support CDM, Zero Trust, cloud assessments, incident response, vulnerability management, policy updates, SCRM reviews, and data calls.
Qualifications
- Bachelor's degree in IT with emphasis in Cybersecurity or Information Assurance, or similar degree. 6 years of experience can be substituted for the bachelor’s degree (included as part of the experience requirement, not additional).
- Must have an active Top Secret clearance with the ability to obtain a Q clearance.
- Minimum 2 years completing tasks that secure organizational systems and information assets.
- Experience implementing measures protecting confidentiality, integrity, and availability.
- Knowledge of SA&A, NIST SP 800-37/800-53, CNSSI, CDM, Zero Trust, cloud, incident response, vulnerability management, and risk
- GISP, CISSP, GSEC, or equivalent required.
BlueWater Federal is proud to be an Equal Opportunity Employer. All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law. BlueWater Federal is a VEVRAA federal contractor and we request priority referral of veterans.
We offer a competitive health and wellness benefits package, including medical, dental, and vision coverage. Our competitive compensation package includes generous 401k matching, employee stock purchase program, and life insurance options, and time off with pay. Salary range: 150-175K
Similar roles
- Sr Contract AnalystBlueWater Federal Solutions · San Antonio, TX · Onsite
- Sr ConsultantBlueWater Federal Solutions · Washington, DC · Onsite
Senior Specialist, Information Security AnalystBNY · Pittsburgh, PA · Onsite
Information Security AnalystCherokee Federal · Washington, DC · Onsite
Information Security Analyst IICalifornia State University, Chico · Chico, QC · Onsite- Information Security Analyst (Virtual Role)USM · Remote · Remote
