Information Security Analyst Principal

What you'll do

• Support DHHS information security infrastructure and design future programs including firewalls and related security issues.
• Analyze information systems to ensure appropriate security functions are integrated into system design and architecture.
• Conduct security impact assessments for development changes during the IHS development process.
• Implement counter-measures or mitigating controls to address identified security risks.
• Create and maintain Standard Operating Procedures, System Security Plans, and other technical security documentation.
• Manage responses and remediation of Plan of Action and Milestones (POAMs) for government systems.
• Monitor emerging security requirements like zero trust and SBOM to communicate impacts to the team.
• Serve as the primary liaison between the GDIT team and customer security organizations.

What we're looking for

• Must have a Bachelor's degree with 10 years of experience, a Master's with 8 years, or a PhD with 6 years.
• Must possess expert knowledge of data security administration principles, methods, and techniques.
• Must hold a security certification such as CISSP or CISA.
• Must have broad knowledge of information assurance (IA) practices and tools.
• Must understand federal security policies including FIPS 199, FIPS 200, and NIST 800-53.
• Must be able to pass an IHS background check to obtain a Public Trust clearance.
• Required experience includes IT security implementation, monitoring, and network configuration.
• Familiarity with Agile SDLC methodology and domain structures is required.