Information Security Analyst

BlueWater Federal Solutions seeks an Information Security Analyst to support the DOE EHSS Application, Infrastructure, and Cybersecurity Support (AICS) program. This onsite role in Germantown, MD centers on implementing and validating safeguards, assisting with Security Authorization and Assessment (SA&A), and contributing to ongoing security capabilities across governance and operations.

Key Responsibilities

• Implement and test safeguards designed to protect the confidentiality, integrity, and availability of DOE EHSS systems and associated data.
• Support SA&A activities using NIST SP 800-37 / NIST SP 800-53, CNSSI, DOE requirements, DISA STIGs, CIS Benchmarks, and approved tools.
• Document test outcomes and provide recommendations for corrective actions, residual risks, risk assessments, and updates to POA&M.
• Develop and maintain cybersecurity planning and authorization-related documentation, including SSPs, COOP/contingency plans, test plans, and authorization evidence.
• Analyze security scans, track remediation progress, support annual reviews, and coordinate evidence with system owners, administrators, and developers.
• Support CDM, Zero Trust, cloud assessments, incident response, vulnerability management, policy updates, SCRM reviews, and data call activities.

Required Qualifications

• Bachelor’s degree in IT with emphasis in Cybersecurity or Information Assurance (or similar). A total of 6 years of experience may be substituted for the bachelor’s degree.
• Must hold an active Top Secret clearance with the ability to obtain a Q clearance.
• Minimum 2 years completing tasks that secure organizational systems and information assets.
• Experience implementing measures that protect confidentiality, integrity, and availability.
• Knowledge of SA&A and related frameworks and activities, including NIST SP 800-37 / 800-53, CNSSI, CDM, Zero Trust, cloud security, incident response, vulnerability management, and risk-related work.
• GISP, CISSP, GSEC, or an equivalent certification.

Tools and Technologies

• NIST SP 800-37
• NIST SP 800-53
• CNSSI
• DISA STIGs
• CIS Benchmarks
• CDM
• Zero Trust
• Cloud security assessments
• SSP
• SCRM

Location and Compensation

Location: Germantown, MD (onsite).
Salary: USD 150,000 - 175,000 per year.

Benefits

• Medical, dental, and vision coverage
• 401k matching
• Employee stock purchase program
• Life insurance options
• Time off with pay
• Competitive compensation package (Salary range: 150-175K)