Remote FedRAMP Systems Analyst

Summary

Join ScienceLogic as a FedRAMP Systems Analyst to ensure the success of the FedRAMP Authorization program. This role involves preparing and reviewing FedRAMP documentation, documenting security findings, and managing technical and program changes.

Requirements

• US Citizenship with the ability to obtain a Public Trust
• FedRAMP experience, including successful completion of products through FedRAMP certification
• Soft skills including the ability to gain the trust of stakeholders and senior management and negotiate priorities with outside teams
• Working knowledge of the software development life cycle (SDLC) for SaaS applications
• Excellent verbal and written communication skills
• Strong analytical and problem-solving skills
• Inspired by bringing cross-functional teams together to accomplish program objectives
• 3 or more years of experience in some facet with the FedRAMP Authorization program
• Experience with FedRAMP, NIST 800-53, FISMA, DoD ILs, DISA SRGs and STIGs, etc
• Experience with Program/Portfolio management toolsets (JIRA/Confluence)
• Experience with continuous monitoring, third-party assessments, and audit management
• Experience with SATS tooling, such as SonarQube or Coverity
• Experience with vulnerability scanners such as Tenable
• Experience with vulnerability management and helping prioritize security related work
• Excellent interpersonal, verbal, and written communication skills with the ability to communicate compliance related concepts to a broad range of technical and non-technical staff
• Excellent organizational and program management skills
• Experience leading, cross-functional programs with the ability to influence priorities and deliver on commitments
• CISA, CISSP, CCSP, CCSK or other related certifications preferred
• Bachelor’s degree preferred

Responsibilities

• Assist in the preparation and review of FedRAMP documentation, including System Security Plans (SSP), Security Assessment Reports (SAR), and Plan of Action and Milestones (POA&M)
• Document security findings, vulnerabilities, and compliance status in accordance with FedRAMP guidelines
• Properly identify, remediate, communicate, or escalate technical and program risks
• Aid the stakeholders in managing technical and program changes
• Gather and report both program and technical metrics
• Ability to assess, customize, and use current program and compliance technologies
• Manage the FedRAMP Baseline (BL) and Impact Level (IL) development roadmap, including identifying, communicating, and escalating program risks
• Facilitate the relationships with the 3PAO, sponsoring agency, and FedRAMP PMO
• Understand security assessments, creation of the POA&M, and ongoing Continuous Monitoring (ConMon) requirements
• Document security findings, vulnerabilities, and compliance status in accordance with FedRAMP guidelines
• Analyze security controls and requirements to ensure they align with FedRAMP standards
• Collaborate with process owners and subject matter experts to influence prioritization of projects and solutions to reduce risk and improve compliance
• Establish, maintain, and influence program stakeholder relationships, expectations, and communications
• Document security findings, vulnerabilities, and compliance status in accordance with FedRAMP guidelines
• Review new product features and designs and provide guidance on requirements and standards including NIST 800-53, NIST 800-171, DoD ILs, and FedRAMP BL requirements
• Understanding of DoDIN APL process and application

Benefits

• A remote-first culture - work from home or come into the office, it's totally up to you
• Comprehensive medical, dental and vision plans
• 401(k) plan with employer match
• Flexible Paid Time Off (FTO) so that you can take the time that you need to re-energize
• Volunteer Time Off (VTO) - take two days off per calendar year to volunteer with your preferred charitable organization
• 5-year Service Milestone Sabbatical
• Paid parental leave
• Generous employee referral bonus program
• Pet insurance
• HQ Office centrally located in Reston Town Center featuring a well-stocked kitchen with rotating snacks and beverages, and catered lunch on Thursdays
• Regular virtual company-wide events, including cooking classes, yoga, meditation and more