> Markdown version of [/jobs/ext/3442383-senior-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/3442383-senior-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Information Security Analyst - **Company:** BlueWater Federal Solutions - **Location:** Germantown, MD, United States - **Experience:** Expert - **Salary:** $165,000.0 - $190,000.0 - **Contract:** Permanent contract - **Skills:** Cloud Computing Security, Cyber Security, Zero Trust Network Access, Software Vulnerability Management, Cloud Platform System, CIS Benchmarks - **Published:** September 24, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/18431297?backUrl=%2Fcareer%2F18431297%2FSenior-Information-Security-Analyst-Maryland-Germantown ## About the Role * Bachelor's degree in Cybersecurity, Information Assurance, or similar field. * Must have an active Top Secret clearance with the ability to obtain a Q clearance * 6 years of experience can be substituted for the bachelor's degree (included as part of the experience requirement, not additional). * Minimum 4 years securing government systems and information assets. * Knowledge of SA&A, NIST SP 800-37, NIST SP 800-53, CNSSI, and federal requirements. * Understanding of CDM, Zero Trust, cloud systems, incident response, vulnerability management, and risk documentation. * GISP, CISSP, GSEC, or equivalent required. ## Description * Implement and assess controls under NIST SP 800-37/800-53, CNSSI, FISMA, FedRAMP, DOE directives, DISA STIGs, and CIS Benchmarks. * Plan and execute security assessments, SA&A, control testing, technical verification, and system, web, and configuration scanning. * Develop ATO packages, SSPs, assessment reports, risk statements, corrective actions, contingency/COOP plans, and authorization artifacts. * Analyze vulnerabilities, recommend remediation, track POA&Ms, verify closure, and escalate risks. * Support incident response, classified spillage, cloud security, CDM/continuous monitoring, and Zero Trust Architecture. * Support policy development, SCRM reviews, data calls, annual reviews, training, and coordination with owners, administrators, developers, EITS, and iJC3. ## Related Videos - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [A practical guide to writing secure Dockerfiles](https://www.wearedevelopers.com/videos/109-a-practical-guide-to-writing-secure-dockerfiles) - [Cloud Vendor Lock-In - Is it just a new version of the Database Abstraction Layers?](https://www.wearedevelopers.com/videos/1185-cloud-vendor-lock-in-is-it-just-a-new-version-of-the-database-abstraction-layers) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Hosting a modern justice system](https://www.wearedevelopers.com/videos/332-hosting-a-modern-justice-system) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)