Security Analyst

<div class="content-intro">9th Way Insignia is a service-disabled, veteran-owned small business bringing transformative technology to our government customers so they can achieve their missions.  Our specialties include cybersecurity, cloud modernization, software development, data analytics, enterprise architecture, enterprise IT, analytics, process automation, and artificial intelligence.  Learn more about 9th Way Insignia at <a href="https://9thwayinsignia.com/">https://9thwayinsignia.com/.</a>Application password: Niner</div>Team (Project) Introduction The VA OIT SPM, Corporate (CORP) Service Line (SL) delivers world-class, Veteran-centric capabilities that provide secure, seamless delivery of IT systems to VA corporate offices so these offices may efficiently and effectively provide benefits and services to Veterans and their families.Professional Level The Security Analyst aligns with an E2 professional level.  An Engineer 2 has a good understanding of the software development life cycle and can take on work without much direction majority of the time. Performs multiple engineering-related tasks in various assignments within the project and firm. An Engineer 2 has broad knowledge of engineering procedures and assists in the resolution of complex problems. An Engineer 2 has strong technical skills and background, a knack for learning new technologies, and a blend of good problem-solving and innovation needed to resolve a wide variety of technical production challenges. Responsibilities <ul><li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-ccp-parastyle="p1" data-ccp-parastyle-defn="{"ObjectId":"5608de39-acc8-52c5-8723-06e2503f1031|1","ClassId":1073872969,"Properties":[201342446,"1",201342447,"5",201342448,"1",201342449,"1",469777841,"Times New Roman",469777842,"Times New Roman",469777843,"Times New Roman",469777844,"Times New Roman",201341986,"1",469769226,"Times New Roman",268442635,"24",469775450,"p1",201340122,"2",134233614,"true",469778129,"p1",335572020,"1",335559740,"240",201341983,"0",134233118,"true",134233117,"true",469778324,"Normal"]}">Support Authorization to Operate (ATO) processes for VA systems by updating and maintaining security documentation, including System Security Plans (SSP), Plan of Action & Milestones (POA&M), Incident Response Plans (IRP), and Business Impact Analyses (BIA).</li><li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-ccp-parastyle="p2" data-ccp-parastyle-defn="{"ObjectId":"506f4605-f8bf-5663-9328-9a8ce0640195|1","ClassId":1073872969,"Properties":[201342446,"1",201342447,"5",201342448,"1",201342449,"1",469777841,"Times New Roman",469777842,"Times New Roman",469777843,"Times New Roman",469777844,"Times New Roman",201341986,"1",469769226,"Times New Roman",268442635,"24",469775450,"p2",201340122,"2",134233614,"true",469778129,"p2",335572020,"1",335559740,"240",201341983,"0",134233118,"true",134233117,"true",469778324,"Normal"]}">Perform continuous monitoring and vulnerability management using tools like Tenable Nessus, SCCD, and adherence to DISA STIGs. </li><li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Conduct risk assessments and ensure compliance with NIST Risk Management Framework (RMF) and FEDRAMP requirements for cloud systems. </li><li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Coordinate and execute annual ATO-related exercises such as Disaster Recovery, Contingency Planning, and Incident Response Tabletop tests with cross-functional stakeholders. </li><li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Ensure timely remediation of vulnerabilities and track mitigation progress in eMASSService Now (SNOW) Continuous Authorization and Monitoring (CAM), collaborating with DevOps and system owners. </li><li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Develop and review Memorandums of Understanding (MOUs), Interconnection Security Agreements (ISAs), Privacy Threshold Analyses (PTAs), and Privacy Impact Assessments (PIAs). </li><li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Provide security analysis and technical support for VA Corporate Service Line systems such as VEMS, POS, and MDM across their lifecycle. </li><li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Support VA’s compliance with government standards (FISMA, HIPAA, NIST SP 800-53, and VA-specific directives). </li></ul>Requirements <ul><li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Bachelors degree in computer science, electronics engineering or other engineering or technical discipline is required.</li><li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">5+ years of experience in a security analyst, system steward, or similar role, supporting government information technology systems. </li><li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Expertise in federal Governance, Risk, and Compliance (GRC) tools such as Service Now (SNOW), Continuous Authorization and Monitoring (CAM) or Enterprise Mission Assurance Support Service (eMASS) </li></ul><div class="content-pay-transparency"><div class="pay-input"><div class="title">Salary Range</div><div class="pay-range">$78,522.52—$95,000 USD</div></div></div><div class="content-conclusion">9th Way Insignia’s range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.Clearance/Background Investigation Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.Benefits Eligible employees will have access to our comprehensive benefits package which includes Medical, Dental, Vision, Voluntary Life Insurance, 401(k), Basic Life A&D, STD, LTD, PTO, Telehealth, paid holidays, FSA, HSA. Additional resources include our Employee Assistance Program (EAP) and Traveling Assistance.Legal We’re an equal employment opportunity employer that empowers our people to fearlessly drive change – no matter their race, color, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, age, marital status, sexual orientation, gender identity, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, or local law.</div>

USA Remote Jobs