> Markdown version of [/jobs/ext/1921705-senior-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/1921705-senior-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Information Security Analyst

- **Company:** Sparksoft Corporation
- **Location:** Columbia, MD, United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Agile Methodology, Amazon Web Services, Cloud Computing, Cyber Security, Continuous Integration, Integrated Development Environments, Salesforce.Com
- **Published:** August 4, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=c081e70238061a29

## About the Role

* Experience in multiple aspects of FISMA, 4+ years.
 * Experience in an agile CI/CD development environment with a focusing on the testing and assessment functions (technical assessment and understanding (dev/sec/ops)
 * Experience in in Agile development and operations support, in respect to FISMA SP 800-53 guidelines.
 * Excellent writing and communication skills
 * Experience in understanding security testing reports.
 * Experience in managing an audit for a program (SCA/ACT, A-123, IRS 1070, etc.)
 * Experience with cloud-based systems (e.g., AWS, Salesforce)
 * Experience in creating and maintaining the deliverables for the NIST RMF (800-series)
 * Experience in the performing application-level testing (CP functional and tabletop testing required)
 * Experience in performing risk assessments.
 * Experience running meetings and holding team members to deadlines.

PREFERRED EXPERIENCE:

 * Experience with CMS security.

EDUCATION & CERTIFICATIONS:

 * 4-6 years of experience in the required skill set (note CISSP requires 5 years in the required skill sets.
 * CISSP required (note that CAP does not qualify).
 * Bachelor's Degree is preferred.

## Description

* Create/Update all client security deliverables (SSP, CP, ISRA, CP, PTA/PIA, etc.)
 * Work with team members to ensure security functions are implemented for the program(s) that are under their care.
 * Act as a trusted advisor for security matters for their programs and provide training on security items when needed.
 * Act as a bridge between client security teams and project teams to bridge the gap between compliance and technical security issues and both teams.
 * Ensure proper testing occurs and manage the vulnerability process in the scope of the program.
 * Translate technical security findings (pen tests, ACT, fortify, Tenable, etc.) to practical issues, and guide teams to appropriate preventative and corrective action.
 * Review program procedures and outputs and implement corrective action when needed.
 * Act as a liaison for the program to client security teams.
 * Support corporate security as needed.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Green Cloud Computing](https://www.wearedevelopers.com/videos/592-green-cloud-computing)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)
- [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)