Spry Methods, Inc. is hiring a
Cybersecurity Analyst

Summary

Spry Methods is seeking a remote Cybersecurity Analyst to support the Department of Interior's cybersecurity program. The role involves various cybersecurity tasks with a focus on NIST Risk Management Framework, FISMA compliance, and information system continuous monitoring. Minimum requirements include public trust, knowledge of cybersecurity tools, 3-5 years direct experience, and specific FISMA artifact experience. Preferred qualifications include CISSP certification, 8+ years experience, and NIST Special Publications experience.

Requirements

• Public Trust
• Knowledge of cybersecurity tools such as: Tenable, Qualys, Governance Risk Compliance (GRC) tools (e.g. Xacta, Risk Vision, CSAM, etc.,)
• 3-5 years direct experience supporting federal organizations Cybersecurity programs
• Experience drafting FISMA related artifacts to include: system security plans, incident response plans, configuration management plan, FIPS 199, digital identity risk assessments, security impact analysis, contingency plan,  security assessment plans and reports, Plan of Action and Milestones (POA&M), and training materials
• Experience in applying NIST Special Publications to information systems
• Experience with performing information system continuous monitoring of security controls to ensure that they continue to be implemented correctly, operating as intended and producing the desired outcome with respect for meeting the security requirements
• Experience participating in security assessments and/or audits

Responsibilities

• Develop functional and technical requirements
• Serve as a POC for Information Systems with security issues
• Prepare and update reports to ensure compliance with mandated internal and external security reporting requirements, including FISMA
• Coordinate security program and system elements with the agency IT Program Managers by evaluating system environments for security requirements and controls
• Manage security controls to ensure confidentiality, integrity and availability of information
• Build security into the system development process and define security specifications
• Support System Owners or Program Officers on the review of system procurement requests to ensure that security has been considered and included
• Adhere to and implement system security controls that ensure the protection of Sensitive but Unclassified (SBU) information using authentication techniques, encryption, firewalls, and access controls
• Complete Security Assessments
• Assist in the Assessment and Authorization process
• Create and/or update the System Security Plans
• Serve as an advisor in risk assessments of all systems and mitigate vulnerabilities
• Adhere to Continuous Monitoring practices to ensure that security controls are maintained over the life of IT systems
• Audit and monitor application, system and security logs for security threats, vulnerabilities and suspicious activities; report suspicious activities to the agency Incident coordinator
• Monitor and coordinate patch management and scanning techniques for all unit systems; participate in identification and mitigation of all system vulnerabilities
• Support and facilitate the security awareness, training, and education program
• Assist the Information System Security Manager (ISSM), or CISO in any other security related duties, as required

Preferred Qualifications

• Certified Information Systems Security Professional (CISSP) certification
• 8+ years experience supporting federal organizations Cybersecurity programs
• Experience with conducting security assessments, audits, and control implementation in accordance with NIST Special Publications
• DoD 8570 IAM Level 2

Benefits

• Medical Coverage - United Healthcare - 3 Options
• Vision Coverage - VSP - Vision Service Plan
• Dental Coverage - Guardian Dental - PPO Premier Plan or Value Plan
• Paid Holidays - Full-time employees receive 11 paid federal holidays
• Paid Time Off (PTO) - PTO accrual starts at 15 days per year
• Training Benefit - Annual training allowance available toward any job-related training or education
• 401 (k) - Multiple Fund Choices through Professional Capital Service (PCS) with a company match