Job description

Overview BlueWater Federal is looking for a Sr Information Security Analyst to support the DOE EHSS Application, Infrastructure, and Cybersecurity Support (AICS) program AICS enables secure, reliable, and data-driven operations across the DOE enterprise through application modernization, DevSecOps, Zero Trust implementation, continuous monitoring, and infrastructure sustainment supporting EHSS’s environment, health, safety, security, and classification missions. Responsibilities • Implement and assess controls under NIST SP 800-37/800-53, CNSSI, FISMA, FedRAMP, DOE directives, DISA STIGs, and CIS Benchmarks. • Plan and execute security assessments, SA&A, control testing, technical verification, and system, web, and configuration scanning. • Develop ATO packages, SSPs, assessment reports, risk statements, corrective actions, contingency/COOP plans, and authorization artifacts. • Analyze vulnerabilities, recommend remediation, track POA&Ms, verify closure, and escalate risks. • Support incident response, classified spillage, cloud security, CDM/continuous monitoring, and Zero Trust Architecture. • Support policy development, SCRM reviews, data calls, annual reviews, training, and coordination with owners, administrators, developers, EITS, and iJC3. Qualifications • Bachelor's degree in Cybersecurity, Information Assurance, or similar field. • Must have an active Top Secret clearance with the ability to obtain a Q clearance • 6 years of experience can be substituted for the bachelor’s degree (included as part of the experience requirement, not additional). • Minimum 4 years securing government systems and information assets. • Knowledge of SA&A, NIST SP 800-37, NIST SP 800-53, CNSSI, and federal requirements. • Understanding of CDM, Zero Trust, cloud systems, incident response, vulnerability management, and risk documentation. • GISP, CISSP, GSEC, or equivalent required. BlueWater Federal is proud to be an Equal Opportunity Employer. All qualified candidates will be considered without regard to race, color, religion, national origin, age, disability, sexual orientation, gender identity, status as a protected veteran, or any other characteristic protected by law. BlueWater Federal is a VEVRAA federal contractor and we request priority referral of veterans. We offer a competitive health and wellness benefits package, including medical, dental, and vision coverage. Our competitive compensation package includes generous 401k matching, employee stock purchase program, and life insurance options, and time off with pay. Salary range: 165-190K

Requirements

Must-haves

BlueWater Federal is looking for a Sr Information Security Analyst to support the DOE EHSS Application, Infrastructure, and Cybersecurity Support (AICS) program
Implement and assess controls under NIST SP 800-37/800-53, CNSSI, FISMA, FedRAMP, DOE directives, DISA STIGs, and CIS Benchmarks.
Plan and execute security assessments, SA&A, control testing, technical verification, and system, web, and configuration scanning.
Develop ATO packages, SSPs, assessment reports, risk statements, corrective actions, contingency/COOP plans, and authorization artifacts.
Analyze vulnerabilities, recommend remediation, track POA&Ms, verify closure, and escalate risks.
Support incident response, classified spillage, cloud security, CDM/continuous monitoring, and Zero Trust Architecture.
Support policy development, SCRM reviews, data calls, annual reviews, training, and coordination with owners, administrators, developers, EITS, and iJC3.
Bachelor's degree in Cybersecurity, Information Assurance, or similar field.
Must have an active Top Secret clearance with the ability to obtain a Q clearance
6 years of experience can be substituted for the bachelor’s degree (included as part of the experience requirement, not additional).
Minimum 4 years securing government systems and information assets.
Knowledge of SA&A, NIST SP 800-37, NIST SP 800-53, CNSSI, and federal requirements.
Understanding of CDM, Zero Trust, cloud systems, incident response, vulnerability management, and risk documentation.
GISP, CISSP, GSEC, or equivalent required.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: jibe
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Wellness