Senior Principal Information Security Analyst, Cloud

What you'll do

• Manage network accreditation for ICAM programs on both unclassified and classified networks.
• Perform Risk Management Framework (RMF) actions in eMASS, including control assessments and asset management.
• Draft and maintain information security policies, standards, and guidelines such as Access Control and Incident Response plans.
• Develop RMF documentation including Security Plans, Implementation Plans, and Plans of Action and Milestones (POA&Ms).
• Assess system compliance against NIST 800-53 controls, DISA STIGs, and SRGs.
• Lead government compliance assessments, penetration testing, and accreditation inspections to mitigate security threats.
• Resolve compliance or audit issues with internal and external stakeholders in a timely manner.
• Ensure systems are hardened through vulnerability scanning, continuous monitoring, and disaster recovery planning.

What we're looking for

• Must be a United States citizen.
• Must possess an active DoD Secret clearance or higher.
• Must have at least 8 years of experience supporting IT customers in an enterprise environment.
• Must have a BA/BS degree and 8 years of experience in Computer Science or an equivalent field.
• Must hold a CISP, CASP, CISA, CISM, or similar IAM Level III DoD 8570/8140 certification.
• Must have experience with FedRAMP Cloud processes and NIST 800-53 risk framework security controls in eMASS.
• Must possess knowledge of DoD cybersecurity policies including DoDI 8500.01, 8510.01, and NIST 800-53v5.
• US Citizenship.