Security Analyst

Description

This role is part of a proposal submission. All offers of employment are conditional and subject to the awarding of the contract. The company reserves the right to modify, delay, or cancel the recruitment process based on the outcome of the award.

Location: Hybrid – Washington, DC
Job Type: W-2
Shift: Monday-Friday; 40-hour work week during DFC core hours of 7:00 AM–6:00 PM ET; after-hours assignments possible

Worksite Address: DFC HQ 1100 New York Avenue NW Washington, DC
Pay Max: $146,200
Security Clearance: Tier 4 High Trust Background Investigation
Direct Reports: 0
Travel Requirements: None

Ryan Consulting Group, Inc. is seeking a Security Analyst to support cybersecurity and information system security operations for the U.S. International Development Finance Corporation (DFC). The role is responsible for analyzing, reporting, and responding to cyber incidents detected, maintaining cybersecurity monitoring operations, proactively identifying threats, and evaluating information systems and cloud infrastructure for organizational risk. The ideal candidate will possess strong federal cybersecurity experience, knowledge of the Risk Management Framework (RMF), and experience assessing vulnerabilities and implementing security controls.

• Monitor security tools including Splunk, Tenable, Qualys, and Service Now.
• Support assigned Risk Management Framework (RMF) activities.
• Analyze vulnerability scans and prepare assessments and recommendations to reduce risks and vulnerabilities.
• Identify and document issues within Risk Registers, Plans of Action and Milestones (POA&Ms), and audit artifacts.
• Analyze cloud environments, including AWS and Azure, for security risks and compliance with FISMA standards.
• Evaluate complex information systems, platforms, and IT cloud infrastructure for organizational risk.
• Recommend improvements to existing risk management controls and implementation of system changes or upgrades.

• Bachelor’s degree in Information Technology, Information Systems, Computer Science, Information Assurance, or a related field.
• 4-7 years of experience preparing IT system security documentation, preferably within the federal government.
• 3+ years of experience analyzing IT systems, preferably within the federal government.
• In-depth knowledge of NIST, OMB, other federal cybersecurity governance standards, and the Risk Management Framework (RMF).
• Strong written and verbal communication skills with demonstrated ability to document processes and procedures.

One of the following:

• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• CompTIA Security+

RYAN offers a comprehensive, competitive benefits package designed to support the well-being of our employees and their families. Some benefits may vary by contract.

• Paid Holidays (varies by contract)
• Paid Time Off (PTO)
• Bereavement, Military, and Parental Leave
• 401(k) or Roth Retirement Plan with Employer Matching
• Medical, Dental, and Vision Coverage
• Health Savings Account (with employer contribution)
• Group Term Life Insurance
• Pet Insurance
• Employee Discount Perks
• Voluntary Life Insurance
• Short- and Long-Term Disability
• Accident, Cancer, and Critical Illness Insurance

Ryan Consulting Group, Inc. is an equal opportunity employer. We are dedicated to ensuring equal employment opportunities in all aspects of employment, including recruitment, hiring, promotion, training, compensation, benefits, and termination. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any…