Security Analyst
Summary
A Security Analyst supporting security assessment and authorization (ATO) of commercial acquisition tools piloted by a federal civilian department. Day to day: reviewing vendor FedRAMP packages, performing control and vulnerability testing in a contractor sandbox, and preparing authorization documentation using NIST SP 800-53, RMF, and FedRAMP processes.
About the role
Imagineeer is seeking a Security Analyst to support security assessment and authorization of commercial acquisition tools piloted by a federal civilian department. You will be the supporting role for the security and authorization readiness checkpoint, handling control testing and authorization documentation.
Key Responsibilities:
- Develop security requirements with the Security Assessor/ATO Lead.
- Review vendor FedRAMP packages and document inherited and customer-responsibility controls.
- Perform control and vulnerability testing in the contractor sandbox.
- Prepare authorization documentation for each piloted tool.
- Work with the contractor-provided sandbox in a FedRAMP-authorized cloud region, with mock AMS/PRISM, FPDS-NG, and SAM.gov interfaces and synthetic data
- Vulnerability scanning and configuration compliance tools
- Vendor FedRAMP authorization packages
Qualifications and Skills:
- Bachelor's degree in cybersecurity, information systems, or a related field.
- 7 or more years of information security experience, including federal assessment and authorization work.
- Working knowledge of NIST SP 800-53, the RMF, and FedRAMP documentation.
- Experience with vulnerability scanning and control testing tools.
- Security+, CGRC (formerly CAP), CISSP, or equivalent certification.
- Ability to pass the client's contractor security vetting and obtain and maintain a PIV credential; this role may carry a higher position risk designation.
Desired Skills and Competencies:
• Experience supporting a FedRAMP 3PAO.
• Experience assessing SaaS integrations and API security.
• Familiarity with CUI safeguarding requirements and NIST SP 800-171.
Additional Information:
Employment for this position is contingent upon the candidate being a United States citizen and having the ability to successfully obtain and maintain a Public Trust clearance, in accordance with applicable federal regulations. We use AI to review resumes. All hiring decisions will be made in compliance with applicable federal, state, and local laws and regulations
Equal Opportunity Employer:
We are an Equal Opportunity Employer and do not discriminate in employment decisions on the basis of race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other status protected by applicable federal, state, or local laws. All employment decisions are based on business needs, job requirements, and individual qualifications.