Information Systems Security Analyst

Description

Information Systems Security Analyst

At B&A, we foster and embrace a distinct set of values that we live by and instill in all aspects of our organization: dedication, commitment, partnership, trust, and recognition. We have incorporated these values into successful delivery for our customers since 1988. B&A believes in ensuring its employees feel deeply connected to B&A, recognizing successes and hard work, and providing continuous opportunities to learn and grow. Our people are entrepreneurial thinkers that combine mindset, vision, and experience to drive value - not only to us as an organization, but to the clients we support. We promote a collaborative culture with our clients, and with each other, as one team working towards a common vision. We'd love for you to join our team!

Job Summary

B&A is looking for an Information Systems Security Analyst to join a contract with a federal government client in support of an important mission. The Information Systems Security Analyst provides technical and analytical support to protect enterprise information systems, networks, and data from cybersecurity threats. This role applies risk management principles, security architecture practices, and operational security controls to ensure system confidentiality, integrity, and availability while supporting incident response, continuity planning, and compliance with applicable cybersecurity laws, policies, and standards.

Responsibilities

• Assess cybersecurity risks, threats, and vulnerabilities across systems, networks, and applications
• Implement and support encryption, access control, and secure communication mechanisms
• Monitor system and network activity to identify, analyze, and respond to security incidents
• Support incident response operations, including detection, containment, and recovery
• Conduct network traffic analysis and support intrusion detection activities
• Support data backup, recovery, disaster recovery, and continuity of operations planning
• Analyze system and application security weaknesses and recommend mitigation strategies
• Contribute to security architecture and enterprise security framework alignment
• Support penetration testing activities and remediation efforts
• Ensure security practices align with applicable laws, regulations, and organizational policies
• Support secure system lifecycle activities from design through operations

Education and Experience

• Bachelor's degree in a related field
• Minimum of four (4) years of professional experience in cybersecurity or information security
• Experience supporting enterprise IT environments, including networks, systems, and applications
• Experience with risk assessment, incident response, and security operations
• Experience working in regulated or compliance-driven environments

Required Skills

• Knowledge of cybersecurity principles, threats, vulnerabilities, and risk management processes
• Experience with encryption technologies and secure protocols (e.g., IPSEC, AES, IKE, SHA, 3DES)
• Understanding of network protocols, TCP/IP, and the OSI model
• Experience with intrusion detection, incident handling, and network traffic analysis
• Familiarity with system and application security threats (e.g., buffer overflow, XSS, SQL injection)
• Knowledge of access control mechanisms and system hardening techniques
• Understanding of disaster recovery, backup, and continuity planning
• Familiarity with national and international cybersecurity laws, policies, and ethical standards
• Knowledge of data protection requirements for PII, PCI, and PHI

Desired Skills

• Experience with cloud computing environments and cloud security architectures (SaaS, IaaS, PaaS)
• Familiarity with ISO or similar organizational and security standards
• Experience with system performance and availability monitoring tools
• Knowledge of enterprise incident response programs and governance models
• Experience supporting penetration testing tools and methodologies
• Familiarity with information security program or project management principles
• Understanding of secure acquisition processes and IT supply chain risk management
• Ability to support organizational risk tolerance assessments and mitigation planning

Security Clearance

• Active Secret Clearance

Required Certification

IAT Level II certification that includes one of the following: Comp TIA Security +, CCNA, GICSP, GSEC, SSCP

More About B&A:

Notable Clients
B&A has grown to be a company that is trusted by our clients for exceptional service, innovative solutions, and inspired employees. Our service extends through federal, state, and local Government, the private sector, and higher education. Some of our notable clients include Department of Homeland Security, U.S. Customs and Border Protection, U.S. Senate, U.S. Courts, U.S. Census Bureau, U.S. Navy, and more.

Benefits and Programs

B&A is proud to offer three robust individual and family medical plans to full time employees, including a Health Savings Account (HSA) option as well as two tiers of dental coverage, vision, life & AD&D, disability, accident, hospital indemnity, and critical illness insurance. In addition to these benefits, B&A employees enjoy paid time off, B&A sponsored trainings and certifications, pet insurance benefits, commuter transit benefits and a free subscription to a virtual exercise platform (NEOU). B&A's 401(k) plan is available to all employees and includes a company matching contribution.

B&A has launched several programs to focus on employee engagement, wellness, and assistance. These include:

• The B&A Cares program: 30/60/90-day wellness check ins, personal development, financial management, and stress management seminars, and more
• A formal mentorship program
• Job shadowing and cross training opportunities
• Brand Ambassador program
• Employee Assistance Program (EAP) - Access to various support resources to include counseling, legal guidance, financial planning, and more
• Monthly teambuilding events
• B&A Annual Wellness Challenges: #StepWithB&A, #WalkDuringLunchWithB&A, #VolunteeringWithB&A, #ExerciseDuringLunchWithB&A, and more

At B&A, we place significant importance on improving the communities and lives of citizens across the nation through our involvement, technology expertise, and employees. B&A puts an emphasis on charitable efforts in the Northern Virginia area, including Capital Area Food Bank pantry drives, book donations, Hope for Henry Foundation events, and many more. In recognition of all these efforts, B&A has been named a Companies as Responsive Employers (CARE) award recipient by Northern Virginia Family Services and nominated by the Northern Virginia Chamber of Commerce for Outstanding Corporate Citizenship Award.

EEO

B&A provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. B&A complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. This policy covers conduct occurring at B&A's offices, and other workplaces (including client sites) and all other locations where B&A is providing services, and to all work-related activities.

B&A participates in e-Verify. We provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS) with information from each new employee's I-9 Form to confirm work authorization.