Information Security Analyst
Posted Updated
Description
Dynamic Solutions Technology, LLC, a premier strategic services firm that meets IT and Service needs for commercial and government clients. We are is seeking a full-time Information Security Analyst to support a Federal Government customer. This is an exempt, on-site position located in Linthicum, MD.
Security Clearance: Active Secret w/TS/SCI eligibility
Responsibilities:
- Monitor enterprise information systems, networks, applications, and security infrastructure to identify suspicious activities, potential threats, unauthorized access, and security vulnerabilities across classified and unclassified environments.
- Conduct recurring vulnerability scans, analyze assessment results, identify security weaknesses, prioritize remediation activities, and track corrective actions to ensure compliance with DoD cybersecurity requirements and established security baselines.
- Investigate cybersecurity alerts, analyze potential security incidents, document findings, and support incident containment, eradication, recovery, and reporting activities in coordination with cybersecurity leadership and authorized Government personnel.
- Support the implementation and assessment of security controls in accordance with the DoD Risk Management Framework (RMF), NIST SP 800-53, and applicable cybersecurity policies to maintain system security authorization and operational compliance.
- Assist ISSMs, ISSOs, and system owners in developing, reviewing, and maintaining System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), security assessment documentation, and authorization artifacts within eMASS or other Government-approved systems.
- Utilize Security Information and Event Management (SIEM) platforms, intrusion detection tools, endpoint protection solutions, and automated monitoring technologies to correlate security events, identify anomalous behavior, and support Security Operations Center (SOC) activities.
- Evaluate system configurations against applicable Security Technical Implementation Guides (STIGs), security checklists, and approved configuration baselines; identify compliance deficiencies and coordinate corrective actions with system administrators and engineering personnel.
- Analyze cybersecurity threat intelligence, indicators of compromise, network activity, and system logs to identify emerging threats, investigate suspicious behavior, and support proactive threat hunting and defensive cybersecurity operations.
- Collaborate with cybersecurity engineers, network administrators, DevSecOps personnel, cloud architects, and Government security stakeholders to evaluate technical risks, implement security improvements, and support secure enterprise operations.
- Prepare vulnerability assessment reports, security incident documentation, risk assessments, compliance findings, remediation status reports, and cybersecurity performance metrics while recommending improvements to strengthen the enterprise security posture.
Minimum Qualifications
- 5+ years of experience in patch management, vulnerability management, cybersecurity operations, or a related IT security field.
- Security Clearance: Active TS/SCI clearance or eligibility
- BS in related filed.
- Two of the following certifications: CompTIA Security+, CySA+, SSCP, or another certification appropriate to the assigned duties under DoD 8140 qualification requirements.
