Job Information
TISTA Science and Technology Information Security Analyst in Washington, District Of Columbia
Overview
TISTA Science and Technologyis seeking aSenior Information Security Analystto join our growing team. The ideal candidate will work collaboratively with a high-performing team of cybersecurity experts on a Federal project to support Assessment and Authorization, Audit, and Continuous Monitoring Support
TISTA associates enjoy above Industry Healthcare Benefits, Remote Working Options, Paid Time Off, Training/Certification opportunities, Healthcare Savings Account & Flexible Savings Account, Paid Life Insurance, Short-term & Long-term Disability, 401K Match, Tuition Reimbursement, Employee Assistance Program, Paid Holidays, Military Leave, and much more!
Stay Connected:
Follow us onLinkedInfor updates on this job and other exciting opportunities.
Responsibilities
Assess the effectiveness of security controls by conducting vulnerability scans, penetration tests, and control testing. Document findings and provide recommendations for remediation.
Assist in preparing for and responding to internal and external audits. Ensure all required documentation is available and accurate, and facilitate communication between auditors and system owners.
Implement and manage continuous monitoring processes to ensure ongoing compliance with security standards. Use automated tools to monitor system configurations and security controls.
Create and update System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and other relevant documentation. Ensure all documents are accurate, comprehensive, and up-to-date.
Generate regular reports on security status, including daily status updates, weekly summaries, and comprehensive monthly reports. Use dashboards and visualizations to enhance report clarity and impact.
Ensure that all security documentation is stored in a centralized repository (e.g., SharePoint) for easy access and management. Regularly update and organize the repository to ensure it remains current and relevant.
Conduct regular risk assessments to identify potential security risks and vulnerabilities. Develop and implement risk mitigation strategies
Monitor compliance with federal security standards, including NIST, FISMA, and FedRAMP. Ensure that all security controls are implemented and maintained in accordance with regulatory requirements.
Assist in developing and implementing incident response plans. Respond to security incidents promptly and effectively, documenting actions taken and lessons learned.
Work closely with system owners, control owners, and other stakeholders to gather necessary information and validate security controls. Facilitate regular communication to ensure alignment and collaboration.
Organize and conduct interviews and workshops with control owners and stakeholders to gather detailed information about security controls and processes. Document findings and provide actionable recommendations.
Participate in regular meetings with development and operations teams to stay informed about system status and future updates. Document discussions, action items, and decisions, and ensure follow-up on outstanding items.
Establish and follow quality assurance processes to ensure that all security assessments, documentation, and reports meet high standards of accuracy and reliability.
Regularly review and update control implementation statements and other security documentation to reflect changes in the system environment and regulatory requirements.
Actively seek feedback from stakeholders and incorporate it into process improvements. Stay current with industry best practices and emerging security trends to continually enhance the security posture
Qualifications
Preferred Professional Certifications:
Certified Information Systems Security Professional (CISSP)
Certified Information Security Auditor (CISA)
Certified Information Security Manager (CISM)
CompTIA Security
Bachelor’s Degree:
A bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field is typically required. Advanced degrees such as a Master’s in Cybersecurity or Information Assurance are highly desirable.
Clearance:
The ability to pass a Tier 2/Modest Background Investigation
Location:
Remote, USA
Pay Range:
The pay for this position ranges from $92,730 to $102,500
The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience, and location
Also, certain positions are eligible for additional forms of compensation, such as bonuses
TISTA associates are eligible to participate in our comprehensive benefits plan! More information can be found here:https://tistatech.com/working-at-tista/
TISTA Science and Technology Corporation,a CMMI Maturity Level 3 company, focuses on delivering information technology and professional services to Federal and State agencies. TISTA is recognized in 2019 by Inc. 5000 as one of the fastest-growing private companies in the US. TISTA is also a recipient of 2019 Top Veteran-Owned Companies by the Washington Business Journal. TISTA also received a 2018 Moxie Award in the GovCon category.
Here at TISTA Science and Technology, we value Veterans and encourage all to apply!
#thinktista #tistacares #tistavaluesvets
Employment Transparency:
TISTA is an Equal Opportunity/Affirmative Action Employer and embraces diversity in our employee population. It is the policy of TISTA to provide equal opportunity to all qualified applicants and employees without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or genetic information. TISTA will refrain from discharging, or otherwise discriminating against, employees or applicants who inquire about, discuss, or disclose their compensation or the compensation of other employees or applicants.
The EEO is the Law poster is available here, and the poster supplement is availablehere. (https://www.eeoc.gov/employers/upload/poster_screen_reader_optimized.pdf)
The Pay Transparency Policy is availablehere. (https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf)
Tista is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation due to a disability for any part of the employment process, please send an e-mail torecruiting@tistatech.comor call (301) 968-3420 and let us know the nature of your request and your contact information.
TISTA is a federal contractor and is subject to the federal contractor COVID requirements under the new FAR/DFARS clauses and must comply with the incorporated Guidance.
If the candidate is hired to perform work on or in connection with one of TISTA’s federal contracts, TISTA is contractually obligated to ask the candidate to verify and show proof of vaccination status and the candidate will be required to comply with mask and social distancing requirements imposed by the FAR/DFARS as well as any additional requirements imposed by TISTA’s customers for any required onsite work.
Job ID2024-5440
Job LocationsUS-DC