Information System Security Analyst

Type of Requisition:

Pipeline

Clearance Level Must Currently Possess:

None

Clearance Level Must Be Able to Obtain:

None

Public Trust/Other Required:

MBI (T2)

Job Family:

Cyber and IT Risk Management

Job Qualifications:

Skills:

Assessment & Authorization (A&A), Information Assurance, Security Architecture Design, Security Requirements

Certifications:

None

Experience:

3 + years of related experience

US Citizenship Required:

No

Job Description:

Seize your opportunity to make a personal impact as an Information System Security Analyst supporting the United States Postal Service. GDIT is your place to make meaningful contributions to challenging projects and grow a rewarding career.

                                                  

At GDIT, people are our differentiators. As an Information System Security Analyst, you will help ensure today is safe and tomorrow is smarter. Our work depends on an Information System Security Analyst joining our team to analyze design, develop, implement, and support code for our government customer, the United States Postal Service.

   

MEANINGFUL WORK AND PERSONAL IMPACT

As an Information System Security Analyst, the work you’ll do at GDIT will be impactful to the mission of USPS. You will play a crucial role in ensuring that USPS information systems remain secure, compliant, and resilient by leading assessment and authorization activities across complex technical environments.

• Lead security assessments for USPS applications and domains, including cloud systems, ensuring compliance with NIST RMF and organizational security standards
• Collaborate with cross-functional teams, business units, and IT stakeholders to guide them through the USPS Assessment & Authorization (A&A) process and support the development of compliant architecture
• Drive risk-based security outcomes by developing actionable security blueprints, security models, and recommendations that strengthen enterprise security posture
• Utilize GRC tools, vulnerability scanning technologies, and security architecture best practices to evaluate risks, document findings, and support authorization decisions

WHAT YOU’LL NEED TO SUCCEED:

Education:

• Bachelor’s degree in computer science or related technical discipline, preferred but not required.
• NOTE: If resources do not have a relevant college degree, an additional 4 years of relevant work experience is required.

Required Experience:

• Ability to manage responsibility for security assessments of a variety of applications or domains, to include cloud computing, and to manage several project/initiatives of large size, complexity, and risk.
• Demonstrated proficiency in implementing security controls, conducting risk assessments, and documenting compliance measures based on NIST RMF and ISO standards to meet organizational and regulatory requirements.
• Demonstrated proficiency in successfully evaluating and supporting documentation, validation, and accreditation processes necessary to assure that new and existing information technology (IT) systems meet the organization's information assurance (IA) and security requirements.
• Demonstrated proficiency in ensuring appropriate treatment of risk, compliance, and assurance from internal and external perspectives.
• Demonstrated ability to support development of actionable security blueprints, principles, models, designs, standards, and guidelines to ensure enterprise IT architecture and support is consistent, usable, secure and adds value to the business.
• Experience with network and vulnerability scanning tools and technologies to interrogate systems for configuration and status.
• In-depth understanding of security architecture principles and best practices to design, implement, and maintain secure IT infrastructures in alignment with A&A policies.
• Demonstrated proficiency in utilizing Governance, Risk, and Compliance (GRC) tools for managing A&A processes.
• Ability to serve as subject matter expert (SME) for the USPS A&A process, including providing guidance to stakeholders, business units, and new A&A resources as necessary.
• Strong organizational skills and ability to build and maintain schedules and step-by-step action plans.
• Effective communication and collaboration skills to work with cross-functional teams, business units, stakeholders, and IT professionals, and brief executives.