IT Security Analyst at Spry Methods

Herndon, Virginia, United States

Apply Now

Not SpecifiedCompensation

Mid-level (3 to 4 years)Experience Level

Full TimeJob Type

UnknownVisa

Cybersecurity, Government Contracting, Cloud ComputingIndustries

Requirements

Must be a US Citizen
In office (Herndon) 3 days a week (Tuesday, Wednesday & Thursday) but may increase as business needs change
Demonstrated knowledge and the ability to analyze systems for Cybersecurity compliance
Ability to work in fast-paced, team-oriented environment
Knowledge of various security scanning tools (Such as NESSUS, Splunk or Application scanning)
Knowledge of Federal and DoD policies and risk assessment methodologies, including FedRAMP
Experience in writing or executing system security documentation, authorization to operate packages, POA&Ms, and policies
Experience in reviewing/editing/writing technical documents
Presentation and public speaking skills required
Knowledge of DISA STIGs and SRGs, Committee for National Security Systems Instructions and NIST Risk Management Framework
Knowledge and understanding of systems and networking technologies and concepts
Ability to interpret and assess network diagrams and drawings using Visio
Familiarity with Testing, Development, Staging, and pre-production environment requiring cyber security support
Knowledge of Privacy Act
Bachelor’s degree in computer information systems or math/sciences

Responsibilities

Understand/document information system specifications and security controls, including logical and physical diagrams, connectivity, communication, and data flow diagrams, both internal and external to the system
Advise stakeholders on multiple courses of action in an environment with changing unconfirmed policy, e.g., NIST RMF and DISA SRG
Document multiple courses of action and identify risk mitigation recommendations in accordance with FedRAMP requirements, SAP NS2 policy, procedures, and best practices, with associated benefits/drawbacks to each
Apply enterprise security frameworks and capabilities, such as FISMA, NIST SP 800, etc. towards existing initiatives such as cloud environments
Develop/update policies and procedures to implement FedRAMP compliance as well as compliant with NIST 800-171 security requirements and other DFAR clauses
Understand enterprise operating environments, including security posture, application environment, and associated security controls
Demonstrate familiarity with current FedRAMP, DOD and NIST Security controls and technologies, including vulnerability management capabilities
Identify and assess Cloud System state, including vulnerabilities, RMF package status/accreditation model, PPS compliance, and patching/CSVA mechanisms
Assist with the creation, update, and maintenance of FedRAMP required security documentation, associated artifacts, and Continuous Monitoring (CONMON) requirements such as the Plan of Action and Milestones (POAM)
Assist the Cloud Operations team with the identification and corrective actions associated with known vulnerabilities
Provide advisement to stakeholders on changing regulatory, government and Cloud / FedRAMP policies, procedures, agreements, etc., including risk assessment, business impact analysis, system categorization, security authorization and accreditation/certification activities (A&A), security control inheritance from various providers, and other artifacts needed to validate SAP NS2 control compliance

Skills

Key technologies and capabilities for this role

FedRAMPNIST RMFPOAMFISMANIST SP 800NIST 800-171DFARSDISA SRGrisk assessmentsecurity controlscloud securityvulnerability managementA&Asystem categorization

Questions & Answers

Common questions about this position

Is this a remote position or does it require office work?

This role requires in-office presence in Herndon 3 days a week (Tuesday, Wednesday & Thursday), but this may increase as business needs change.

What are the key skills required for the IT Security Analyst role?

Key skills include demonstrated knowledge of cybersecurity compliance analysis, ability to work in a fast-paced team environment, knowledge of security scanning tools like NESSUS and Splunk, knowledge of Federal/DoD policies and FedRAMP, and experience with system security documentation such as POA&Ms and policies.

What is the salary or compensation for this position?

This information is not specified in the job description.

What kind of team environment can I expect?

The role involves working as a member of the SAP NS2 cyber team in a fast-paced, team-oriented environment.

What qualifications make a strong candidate for this role?

Strong candidates must be US Citizens with hands-on experience in FedRAMP compliance, writing security documentation like POA&Ms, knowledge of security tools such as NESSUS and Splunk, and familiarity with NIST, DoD policies, and risk assessment methodologies.

Spry Methods

Provides IT and cybersecurity solutions

About Spry Methods

Spry Methods delivers IT and cybersecurity solutions primarily to enterprise and government sectors. Their services include cybersecurity management, intelligence operations, data assurance, IT infrastructure support, software development, and program management. These services work by implementing streamlined security processes and integrated IT operations to protect clients' assets and improve efficiency. Unlike many competitors, Spry Methods emphasizes high-quality service delivery, certified by ISO 9001:2015 and CMMI Level 3, which enhances their reliability. The company's goal is to transform clients' operations in the digital world, making them more secure and efficient while maintaining a strong focus on recruiting top talent to ensure effective solutions.

McLean, VirginiaHeadquarters

2001Year Founded

VENTURE_UNKNOWNCompany Stage

Government & Public Sector, Enterprise Software, CybersecurityIndustries

51-200Employees

Risks

Emerging cybersecurity firms offer innovative solutions at lower costs, threatening Spry's market share.

Rapid AI-driven cyber threat evolution requires Spry to continuously invest in new technologies.

Potential changes in government contracting policies could impact Spry's future revenue streams.

Differentiation

Spry Methods holds ISO 9001:2015 and CMMI Level 3 certifications, ensuring quality service.

The company offers comprehensive IT and cybersecurity solutions for enterprise and government sectors.

Spry Methods secured the CIO SP3 Small Business Contract, highlighting its government service capability.

Upsides

Increased federal budget for cybersecurity offers more government contract opportunities for Spry.

Growing demand for AI-driven cybersecurity tools aligns with Spry's service offerings.

Hybrid work models require enhanced IT support, matching Spry's expertise.

Land your dream remote job 3x faster with AI

Try Jobo Free