Security Analyst, Cloud Zero Trust

Cratis supports a DoW cloud Zero Trust (ZT) program. The Security Analyst runs the recurring assessment and validation work: collecting evidence, testing controls after remediation, keeping the ZT tracker accurate, and triaging findings into the remediation backlog., * Collect, refresh and verify evidence for Target-level ZT activities on the assessment cycle.

• Test controls after remediation and record repeatable results.
• Verify that inherited enterprise controls work inside the cloud boundary.
• Maintain the ZT tracker as the system of record.
• Triage vulnerability and configuration findings with severity and owner.
• Support per-application assessments and quarterly readouts.

• 2 to 5 years in security operations, assessment or compliance for DoD or federal systems.
• Working knowledge of NIST SP 800-53, RMF and eMASS.
• Hands-on familiarity with AWS security services and a SIEM.
• CompTIA Security+ CE at start.
• Active Top Secret clearance.

• 401(k)
• 401(k) matching
• Dental insurance
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Retirement plan
• Vision insurance