Information Security Analyst; Journeyman

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Professional Client Site
- Elizabeth City, NC, Elizabeth City, NC, US

Who We Are: Oasys International LLC (Oasys) is a growing federal government contractor delivering innovative technology, engineering, and professional services in support of critical missions across the civilian, defense, and homeland security communities. Our continued growth and commitment to excellence have earned Oasys recognition on the Inc. 5000 list of America’s fastest-growing private companies for five consecutive years and as a Best Place to Work in Virginia for the past two years.

At Oasys, our people are at the heart of everything we do. Our team of talented technologists, engineers, consultants, and subject-matter experts works alongside our federal customers to solve complex challenges, modernize critical systems, and make a meaningful impact on the missions we support.

What makes Oasys different is the experience we strive to create for our employees. We offer the opportunity to do meaningful work while being part of a collaborative, people-focused organization where your ideas, expertise, and contributions are valued. We believe great people do their best work when they have opportunities to grow, are recognized for what they bring to the team, and have the flexibility and support needed to build a rewarding career.

Whether you are looking to deepen your technical expertise, take on new challenges, or grow into your next leadership opportunity, Oasys is a place where you can build your career while contributing to missions that matter.

Join Team Oasys and bring your talent to a company where your work is valued, your growth is supported, and your impact matters.

Position Summary:

Oasys is seeking an I
nformation Security Analyst
- Journeyman to support cybersecurity, information assurance, security operations, and Risk Management Framework (RMF) activities for mission-critical information systems. The successful candidate will help protect computer networks, applications, digital information, and electronic infrastructure by assessing cybersecurity risk, validating security controls, supporting authorization and assessment activities, monitoring security posture, and identifying and remediating vulnerabilities. This role works closely with security, technical, and Government stakeholders to ensure systems meet applicable cybersecurity requirements and remain compliant throughout the system development life cycle.

Primary Responsibilities:

• Plan, implement, upgrade, monitor, and support security measures designed to protect computer networks, systems, applications, digital files, and electronic infrastructure.
• Evaluate and validate technical processes supporting authorization and assessment activities to ensure systems meet organizational cybersecurity requirements.
• Perform Risk Management Framework (RMF) activities for information systems, including systems operating in Government cloud environments.
• Assess cybersecurity risks across systems, applications, and processes against applicable security control frameworks, regulations, policies, and requirements.
• Assist the Security Controls Auditor with security control validation and RMF activities.
• Perform vulnerability and risk analyses of computer systems and applications throughout all phases of the system development life cycle.
• Analyze vulnerability management activities, recommend remediation solutions, and develop and maintain Plans of Action and Milestones (POA&Ms).
• Use Security Information and Event Management (SIEM) capabilities to support security…