Security Analyst

Synergy Business Innovation & Solutions is a premier implementer of cutting-edge software solutions. Synergy brings the experience and expertise necessary to deliver capability that provides tangible ROI to our customers. Synergy’s core areas of expertise are in the fields of Digital Transformation, Cloud Solutions, SaaS and Low-Code/No-Code solutions, Emerging Technologies, Data analytics and Visualization, Information Assurance, and Business Process Re-Engineering.Synergy offers its employees a generous portfolio of core and voluntary benefits including group medical, dental, and vision insurance, HSA, FSA, 401(k) with immediately vested company match, PTO/Sick Leave, 11 paid federal holidays, company paid life, short-term and long-term disability insurance, tuition and training reimbursement, fitness/wellness reimbursement, a referral bonus program, and life management programs.At Synergy, you’ll be challenged and given the opportunity to grow in your career path. In fact, growth is such a big deal to us that you will have dedicated career coaches available for every employee, company-funded certification opportunities, education reimbursement, and a general open-door policy so that you have support when you need it. Our team is eager to learn, fast-paced, and quality-driven—if that sounds like you, Synergy has a position for you! This position is designated as work-from-home. Description

• We are seeking a mid-level Security Analyst. The candidate will work for the engineering division that supports developing and managing a suite of enterprise services and applications. The candidate should have a strong Dev/Sec/Ops background that will focus embedding security practices into the automated software development lifecycle, ensuring systems meet federal government compliance standards. The candidate will work closely with our DevOps, Support, and administrative teams in an agile environment to maintain the security posture of systems.    

Essential Functions & Duties:

• Execution of Risk Management Framework (RMF)
• Perform Security Impact Assessment for all application and environment updates
• Counsel to ensure auditing, testing, preventive and reactive measures are being adequately implemented for systems with an active Authorization to Operate (ATO).
• Practical knowledge and skills in working with cloud computing platforms, while adhering to the strict security standards set by the Federal Risk and Authorization Management Program (FedRAMP)
• Develop an in-depth understanding of customer requirements to quantify security and application risks, and perform impact assessments
• Maintaining ongoing vigilance to ensure adherence to regulatory requirements through continuous monitoring of critical processes
• Oversight, expertise, technical security strategy, standards, and best practices for security categorizations (low, moderate and high).
• Reviews, testing and implementation of security requirements within project plan timelines.
• Research and tracking of Agency security standards, policies, and procedures.
• Support for multiple project assignments with strong and effective communication, time management and collaboration skills.

Skills, Qualifications and Certifications of Best Candidates:

• Documented experience executing Risk Management Framework (RMF, NIST-800-53)
• Experience with agile software development
• General knowledge of security best practices and compliance requirements
• Excellent organizational and communication skills are mandatory for various stakeholder audiences
• Experience collaboratively establishing secure configuration baselines for technologies
• Knowledge or experience with conducting Assessment and Authorization (A&A) and Continuous Monitoring following NIST guidelines
• Knowledge or experience developing security documentation and conducting reviews for A&A packages
• Maintain, track, and communicate detailed project tasks
• Manage initial and reauthorization System Assessment and Authorization (SAA)/ Security Controls Assessment (SCA) task and milestone, task dependencies for low, moderate, and high security systems
• Identify and visually demonstrate system boundaries, select security controls, and ensure implemented controls are adequate for COTS or proprietary web applications. Provide recommendations as necessary to meet or improve controls
• Ensure security policies are developed, maintained and updated to meet IT security best business practices and standards, including Federal Info Security Management Act (FISMA), and National Institute of Standards and Technology (NIST) 800-53 – IPS federal info processing standard
• Be able to review security scans, advise on triaging vulnerabilities, and be able to provide recommendations on mitigating secur