Top 263 Fisma Security Analyst Jobs

Security Analyst
All In Solutions —Remote
- Up to $90,000 a year
- Full-time
- Remote
- 5 years
- HIPAA
- Mid-level
Quick Apply
4d
SOC Analyst
Concept Plus —Remote
- Full-time
- Remote
- Computer Science
- Research
- Mid-level
- Paid holidays
- Dental insurance
Quick Apply
Junior System Security Analyst
Blu Omega —Remote
- $45,000 - $65,000 a year
- Remote
- US work authorization
- 1 year
- Communication skills
Junior System Security Analyst
Blu Omega LLC —Remote
- $45,000 - $65,000 a year
- Contract
- Remote
- US work authorization
- 1 year
- Communication skills
Information Security Analyst
Saliense Consulting LLC —Arlington, VA
- Hybrid work
- Computer Science
- Bachelor of Science
- Mid-level
- Health insurance
- Dental insurance
Quick Apply
Cybersecurity Analyst
Neevsys —Remote
- Remote
- Computer science
- Azure
- Computer Science
Senior Cybersecurity Engineer
Peraton —Washington, DC
- $135,000 - $216,000 a year
- Computer Science
- Bachelor of Science
- System design
- Health savings account
- Paid holidays
Security Risk Analyst
Xcel Energy —Minneapolis, MN
- $73,700 - $104,633 a year
- Computer Science
- Mid-level
- Bachelor's degree
- Health savings account
- Paid holidays
2d
Cybersecurity and Cloud Automation Engineer
Leidos —Remote
- $107,900 - $195,050 a year
- Full-time
- Hybrid work
- Azure
- 8 years
- Bachelor's degree
10d
Principal Network Engineer
Leidos —Maryland
- $116,350 - $210,325 a year
- Full-time
- Hybrid work
- System design
- Master's degree
- Presentation skills
Junior Vulnerability Analyst
Blu Omega —Remote
- $45,000 - $65,000 a year
- Remote
- Analysis skills
- US work authorization
- Scripting
- AD&D insurance
- Paid holidays
Lead IT Security Analyst - HIPAA, HITRUST, FISMA
NYU Langone Health —New York, NY
- $121,792.22 - $210,091.64 a year
- Online Application
- Bachelor of Science
- HIPAA
- Bachelor's degree
- Wellness program
Data Analyst (Network Security)
Noblis —Washington, DC
- $59,200 - $112,150 a year
- Full-time
- Remote
- Computer Science
- Master's degree
- High school diploma or GED
- Health insurance
- Tuition reimbursement
Information Security Analyst
Key2Source Inc —Atlanta, GA
- Contract
- Mid-level
- Bachelor's degree
- Training & development
Quick Apply
Information System Security Compliance Analyst (Multiple Levels)
Noblis —Washington, DC
- $78,900 - $180,525 a year
- Full-time
- Remote
- 18 years or older
- Microsoft Excel
- 6 years
- Health insurance
- Tuition reimbursement
Junior Vulnerability Analyst
Blu Omega LLC —Remote
- $45,000 - $65,000 a year
- Contract
- Remote
- Analysis skills
- US work authorization
- Scripting
- AD&D insurance
- Paid holidays
Senior Security Analyst/ISSO
A P Ventures LLC —Columbia, MD
- Remote
- Azure
- Computer Science
- Master's degree
Quick Apply
Cyber Security Analyst
Tactibit Technologies —Suitland, MD
- $0 a year
- Full-time
- Azure
- Computer Science
- Bachelor of Science
Quick Apply
Cyber Security Analyst
Cherokee Federal —Washington, DC
- $150,000 - $155,000 a year
- Full-time
- Remote
- Background check
- Military encouraged
- Organizational skills
- Health insurance
- Dental insurance
Quick Apply
5d
Associate Security Analyst
IT Tech Consulting —New York, NY
- $102,000 - $145,000 a year
- Part-time
- Hybrid work
- Computer Science
- Research
- Mid-level
- Health savings account
- Health insurance
Quick Apply
10d

I want to receive the latest job alert for Fisma Security Analyst

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

Fisma Security Analyst jobs near

Security Analyst

All In Solutions
Remote

Quick Apply

Job Details

Full-time | Contract
Up to $90,000 a year
4 days ago

Qualifications

CISSP
Nessus
Vulnerability management
CompTIA Security+
Identity & access management

Full Job Description

● Brief Description: The Security Analyst supports Risk Management Framework, cybersecurity compliance, Authority to Operate, and continuous monitoring activities across a complex, mission-critical cloud platform hosted in AWS GovCloud supporting 300+ applications and services. This role performs vulnerability scanning, security documentation management, Plan of Actions and Milestones tracking, audit support, credential and account management, and security posture reporting, ensuring continuous compliance with Federal and VA security requirements across all platform and tenant authorization boundaries.

● Responsibilities:

○ Conduct ad hoc, prescribed, and recurring vulnerability scans for the platform and all hosted applications using Nessus and approved scanning tools

○ Document and report scan findings in accordance with VA RMF and POA&M processes including uploading results to the appropriate scan repository and maintaining the Continuous Authorization and Monitoring system security posture

○ Create and maintain Plan of Actions and Milestones within SNOWCAM, ensuring proper alignment to NIST security families and Control Correlation Identifiers, with periodic review and updating of milestones and mitigation plan details

○ Draft and maintain POA&M verbiage clearly depicting mitigation strategies and timelines, closing out POA&Ms once mitigated, overcome by events, or no longer relevant

○ Maintain program security documents, diagrams, and RMF artifacts including Privacy Threshold Analysis, Privacy Impact Analysis, Security Impact Analysis, Business Impact Analysis, Data Security Categorization, hardware and software lists, and Ports Protocols and Services Management documents

○ Collaborate with application development teams and platform architects to establish and maintain Interconnection Diagrams, High-Level Diagrams, and security assessment boundary diagrams

○ Support all security audits including Inspector General audits, Security Assessment and Validation Directorate assessments, Cybersecurity Compliance Task Force audits, and assessments by Office of Information Security and external teams

○ Attend assessment closeout meetings and review reported findings to ensure accuracy with assessed platform assets and resources

○ Draft assessment finding mitigation plans including roadmaps and timelines for all prescribed remediations

○ Conduct regular user access audits ensuring inactive accounts are removed and existing accounts contain only access required for assigned duties

○ Enforce role-based access management controls, Zero Trust Architecture, and least-privilege principles in accordance with VA security governance policy

○ Rotate service account credentials in accordance with VA security policy and NIST guidelines

○ Submit and maintain Technical Reference Model requests for licensed software and application usage, drafting justification verbiage and attending TRM approval board meetings

○ Submit and maintain Business Partner Extranet connection requests, managing information gathering, submission, and approval meetings

○ Support development and maintenance of Incident Response Plans and Disaster Recovery Plans including RACI charts and tabletop exercise participation

○ Contribute to monthly RMF, Security, and ATO Reports detailing authorization posture, vulnerability findings, POA&M tracking, and remediation progress

○ Support tenant ATO/ATC package preparation including documentation, training, and guidance for tenant teams

● Qualifications:

○ Demonstrated experience in cybersecurity compliance, vulnerability management, or RMF support for Federal IT programs

○ Experience with vulnerability scanning tools, specifically Nessus Professional or equivalent

○ Hands-on experience with security posture tracking systems (SNOWCAM, eMASS, or equivalent)

○ Experience creating and managing Plan of Actions and Milestones through full maturity cycles

○ Knowledge of NIST SP 800-53 Rev. 5 security controls, NIST SP 800-37 Rev. 2 RMF process, FISMA, and FIPS requirements

○ Experience developing and maintaining RMF security documentation including PTA, PIA, SIA, BIA, ICD, HLD, and boundary diagrams

○ Experience supporting security audits and assessments from multiple oversight organizations

○ Knowledge of credential and account management practices including Zero Trust Architecture and least-privilege principles

○ Familiarity with cloud security in AWS environments including EKS, container security, and cloud-native vulnerability management

○ Experience with TRM submission and governance processes

○ Understanding of HIPAA, Privacy Act, and Federal data protection requirements

○ Experience working in Agile or SAFe environments with sprint-based delivery cadences

○ Security+ or equivalent cybersecurity certification required

○ CISSP, CAP, or equivalent certification preferred

○ Bachelor's Degree from an accredited academic institution with a minimum of 5 years of experience in cybersecurity compliance, vulnerability management, or RMF support for Federal IT environments

○ OR

○ Associate's Degree from an accredited academic institution with a minimum of 7 years of experience in cybersecurity compliance, vulnerability management, or RMF support for Federal IT environments

● Plus:

○ Department of Veterans Affairs (VA) experience

○ Active Personal Identity Verification (PIV) card

○ Experience with VA-specific security governance including VA Handbook 6500, VA Directive 6500, and VA Critical Security Controls

○ Experience with SNOWCAM, ICAMP, and OIS Unified Services Portal

○ Experience supporting ATO for platforms with tiered multi-tenant authorization boundaries

Pay: Up to $90,000.00 per year

Work Location: Remote

Quick Apply

Refine Your Search

Fisma Security Analyst jobs

Security Analyst

SOC Analyst

Junior System Security Analyst

Junior System Security Analyst

Information Security Analyst

Cybersecurity Analyst

Senior Cybersecurity Engineer

Security Risk Analyst

Cybersecurity and Cloud Automation Engineer

Principal Network Engineer

Junior Vulnerability Analyst

Lead IT Security Analyst - HIPAA, HITRUST, FISMA

Data Analyst (Network Security)

Information Security Analyst

Information System Security Compliance Analyst (Multiple Levels)

Junior Vulnerability Analyst

Senior Security Analyst/ISSO

Cyber Security Analyst

Cyber Security Analyst

Associate Security Analyst

I want to receive the latest job alert for Fisma Security Analyst

Related Searches

Explore jobs in more locations

Job Seeker Tools

Employer Tools

Browse

Stay Connected