Systems Security Analyst

Who we are:

ShorePoint is a fast-growing, industry recognized and award-winning cybersecurity services firm with a focus on high-profile, high-threat, private and public-sector customers who demand experience and proven security models to protect their data. ShorePoint subscribes to a "work hard, play hard" mentality and celebrates individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers. We are equally passionate about an environment that supports creativity, accountability, diversity, inclusion and a focus on giving back to our community.

The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation's critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individuals technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, including major carriers for health care providers. Highlighted benefits offered: 18 days of PTO, 11 holidays, 85% of insurance premium covered, 401k, continued education, certifications maintenance and reimbursement and more.

Who we're looking for:

We are seeking a Systems Security Analyst with experience supporting the integration, testing, operations and maintenance of systems security. The ideal candidate has experience applying cybersecurity principles, assessing system security implementations, and supporting monitoring activities to identify vulnerabilities and security risks across systems and databases. The Systems Security Analyst role focuses on analyzing system and organizational security posture, evaluating security controls and supporting cybersecurity risk management activities across the system lifecycle. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

What you'll be doing:

• Analyze and report organizational and system security posture trends, including monitoring activities related to database security risks.
• Apply security policies and cybersecurity principles to ensure systems meet defined security objectives and requirements.
• Assess access control implementations to ensure alignment with least privilege and need-to-know principles.
• Evaluate configuration management, change management and release management processes for security compliance.
• Assess and monitor cybersecurity practices associated with system implementation, testing and operational activities.
• Assess the effectiveness of implemented security controls, including controls protecting databases and data stores, and identify areas requiring improvement.
• Ensure systems security operations and maintenance activities are properly documented and kept current.
• Implement security measures to resolve vulnerabilities, mitigate risks and support system confidentiality, integrity, availability, authentication and non-repudiation.
• Support security testing of applications and systems, including identifying security deficiencies and supporting remediation or risk acceptance processes.
• Conduct security architecture reviews, identify gaps and contribute to the development of security risk management plans.
• Support Risk Management Framework (RMF) activities and related documentation, including lifecycle support plans, operational procedures and system documentation updates.
• Collaborate with stakeholders to resolve security incidents, address vulnerabilities and ensure minimum security requirements are implemented across applications.

What you need to know:

• Experience assessing security controls and security system designs using cybersecurity frameworks and principles (for example CIS Critical Security Controls, NIST SP 800 series or the Cybersecurity Framework).
• Understanding of vulnerability identification, security testing methods and vulnerability scanning practices and monitoring of systems and database environments.
• Knowledge of configuration management, operating systems and system security testing and evaluation methods.
• Knowledge of network security architecture, networking concepts and protocols and how traffic flows across networks.
• Knowledge of cybersecurity risk management processes, laws, policies and governance relevant to cybersecurity and privacy.
• Knowledge of cybersecurity threats, vulnerabilities, cryptography concepts, identity and access management principles and security practices protecting sensitive or regulated information.

Must have's:

• 4+ years of experience in cybersecurity, information security or a related field.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Applicants must be a U.S. citizen and eligible to obtain and maintain a security clearance, in compliance with federal contract requirements.

Beneficial to have:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering or a related field.
• Industry recognized certifications.

Where it's done:

• Remote (Herndon, VA).