Cybersecurity Analyst (ISSO)

Overview Edgewater Federal Solutions is currently seeking a Cybersecurity Analyst (ISSO) to provide high level technical advice and guidance to management and other technical specialists on critical IT cybersecurity issues. The position is seeking a talented, professional to perform cybersecurity system documentation of all information systems; conduct technical risk and vulnerability assessments of information systems to identify vulnerabilities, risks, and protection needs. Conduct systems security evaluations, audits, and reviews. Apply FISMA, NIST and Federal agencies guidance for security control policies and procedures. Develop policies, procedures, and strategies to ensure program office is in compliance with all Federal and Agency level laws, directives and guidance. Provide advice and guidance on implementation of developed policies, procedures and strategies to management and other technical specialists. Position requires consistent exercise of discretion and judgment. This position is remote and supports The Department of Energy in Germantown, Maryland. Responsibilities Responsibilities include, but are not limited to the following: Act as an advisor to system owners and authorizing officials on all matters, technical and otherwise, involving the security of information systems under purview. Assist with the development of required cybersecurity documentation including but not limited to: system security plans, privacy impact assessments, security categorization, and incident response plan. Work with the Information Systems Security Manager (ISSM) to obtain and maintain the system’s Authority to Operate (ATO). Assist in the creation and maintenance of organizational procedures and guidance on cybersecurity and information assurance matters as they relate to information systems. Assists in the interpretation and development of security operating procedures to protect networks, and other sensitive information. Provide guidance to system administrators and system owners on adherence to applicable requirements for maintaining security posture of authorized systems. Assist in the interpretation and development of security operating procedures to protect networks, and other sensitive information. Conduct security assessments of information systems in adherence to FISMA, FIPS and NIST requirements. Perform risk assessments and analysis in support of ongoing awareness and adherence to the organizations risk tolerance. Anticipates security requirements and identifies sound security controls for applications, systems, and processes. Research and when necessary, publish and distribute notifications which address major information security threats, i.e. hacking, malicious activity, damaging vulnerabilities with exploits in the wild, Trojans, Worms, and Viruses. Conduct vulnerability scanning of information systems analyze and report on findings. Monitor information system’s CDM (continuous diagnostics and mitigation) tools. Technical writing. Provide trainings to end users, owners, and stakeholders. Experience with privacy policy and privacy incidents. Performs other tasks as assigned. Qualifications US Citizenship is required. Must be eligible to obtain and maintain Federal Security Clearance at Secret or higher level. A bachelor’s degree in Cybersecurity, Computer Science or other relevant field of study. Any equivalent combination of experience and training that provides the required knowledge, skills, and abilities. 3-4 years of relevant progressively responsible cybersecurity experience. Ability to effectively communicate with other team members on technical information related to information systems’ design and implementation. General knowledge of information technologies to include computer hardware and software, operating systems, and networking protocols. Familiarity with CDM tools produced by CarbonBlack, ForeScout, Tennable, Varonis, Splunk. Familiarity with FISMA and Security Assessment and Accreditation (SA&A) processes. Physical Demands: The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. While performing the duties of this job, the employee may be regularly required to stand, sit, talk, hear, reach, stoop, kneel, and use hands and fingers to operate a computer, telephone, keyboard, and standard office equipment. Specific vision abilities required by this job include close vision requirements due to computer work. The employee must occasionally lift and/or move up to fifteen (15) pounds. Fine hand manipulation (keyboarding). Salary: $90,000.00 - $110,000.00 Additional benefits include: Paid Time Off & Holiday Pay Medical Insurance Dental Insurance Vision Insurance Disability, Life Insurance, and AD&D Flexible Spending Accounts Pre-Tax 401K and/or After-Tax Roth IRA (with employer matching contribution) Tuition and Technical Training Reimbursement Exercise Reimbursement Computer Reimbursement Employee Assistance Program Working at Edgewater Federal Solutions: Edgewater Federal Solutions is a privately held government contracting firm located in Frederick, MD. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services, and timely delivery. Edgewater Federal Solutions is ISO 9001, 20000-1, 270001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named in the Top Workplaces in the Greater Washington Area Companies since 2018. Edgewater Federal Solutions is an Equal Opportunity Employer. It has been and continues to be our policy to provide equal employment to all employees and applicants for employment without regard to race, color, religion, gender, national origin, age, disability, marital status, veteran status and/or other status protected by applicable law.#LI-HH1