Senior Information Security Analyst SME

Are you seeking an opportunity to make an impact?

At NetCentrics, we proudly hold a distinguished position as a leader in cybersecurity, cloud, digital transformation, and mission support. With an esteemed clientele that includes the DoD, DHS, Federal Civilian Agencies, and the Intelligence Community, our impact on national security is undeniable. We are a diverse group of intellectually curious people, solving hard problems, and living by our core values while bonded by the shared vision to secure our nation - join us! 

The Opportunity:

We are seeking a highly experienced Senior Information Security Analyst (SME) with a proven track record of 10+ years in implementing and performing security controls. The SME will play a pivotal role in leading Risk Management Framework (RMF) assessment, authorization, and monitoring processes for systems in compliance with NIST and ICD 503 standards and best practices. This role demands advanced expertise in cybersecurity methodologies, risk management, and cloud security, along with proficiency in assessment and authorization (A&A) platforms. An active TS/SCI security clearance is required.

Responsibilities:

• RMF Leadership: Lead the assessment, authorization, and monitoring processes for systems per NIST and ICD 503 standards.
• Policy Knowledge: Maintain up-to-date expertise on Federal policies and practices related to cybersecurity.
• A&A Platforms: Utilize and manage A&A application platforms (e.g., eMASS, CSAM, Xacta) to perform compliance tasks outlined in Section 6.3.
• Security Expertise: Provide advanced security insights in architecture, network and infrastructure security, or next-generation security technologies, including agile/hybrid agile and cloud environments.
• Cloud Security: Perform compliance assessments, vulnerability analysis, and risk management specific to cloud computing environments.
• Vulnerability Analysis: Analyze and trend vulnerability data from diverse, heterogeneous devices to provide actionable insights.
• Documentation and Communication: Deliver clear, concise, and actionable reports to stakeholders and possess excellent verbal and written communication skills.

Required Qualifications:

• 10+ years of proven experience in security control implementation and analysis.
• Extensive experience with NIST RMF and ICD 503 frameworks and processes.
• Proficiency in A&A platforms, such as eMASS, CSAM, or Xacta (preferred).
• Strong knowledge of architecture, network and infrastructure security, and modern security practices.
• Expertise in cloud security compliance controls, risk assessments, and vulnerability management.
• Experience in cybersecurity within Federal and classified environments.
• Active TS/SCI security clearance is mandatory.

Preferred Qualifications:

• Knowledge of Federal cybersecurity policies and best practices.
• Hands-on experience with hybrid agile frameworks and secure cloud solutions.
• Proven ability to analyze and manage risk and vulnerability data from large, complex systems.