Information Systems Security Officer (ISSO) (Junior Cloud ISSO)

Gray Analytics is seeking a Junior Cloud Information System Security Officer (ISSO) / Cloud Security Analyst to support cybersecurity operations for Federal cloud environments. The successful candidate will assist senior cybersecurity personnel with RMF activities, continuous monitoring, security assessments, vulnerability management, and compliance documentation while developing expertise in Federal cybersecurity requirements.

This position is ideal for individuals with foundational cybersecurity experience seeking to expand their knowledge of cloud security and Federal information assurance programs.

Responsibilities

• Support implementation of RMF requirements throughout the system lifecycle.
• Assist with development and maintenance of SSPs, POA&Ms, Security Control Traceability Matrices, and other authorization documentation.
• Perform vulnerability assessments using approved scanning tools.
• Assist in remediation tracking and POA&M management.
• Monitor security dashboards and investigate security alerts.
• Support continuous monitoring activities and compliance reporting.
• Review system configurations for compliance with NIST security controls.
• Participate in incident response activities and documentation.
• Assist with audit preparation and evidence collection.
• Coordinate with system administrators, cloud engineers, and cybersecurity staff.
• Maintain cybersecurity documentation and configuration baselines.
• Stay current with evolving Federal cybersecurity guidance and cloud security best practices.

Do you have experience in Vulnerability management?, Do you have a Bachelor’s degree?, * Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related discipline.

• 6+ years of cybersecurity, information assurance, or information systems experience.
• Security+
• Familiarity with Federal RMF processes.
• Working knowledge of:

o NIST 800-37 o NIST 800-53 o FISMA o Cloud security fundamentals

• Experience supporting vulnerability management and security compliance activities.
• Familiarity with Microsoft Azure or AWS cloud environments.
• Strong analytical, organizational, and communication skills
• Active Public Trust required.
• Ability to obtain and maintain a Secret Clearance.

Desired Qualifications:

• CAP (preferred)
• CySA+
• SSCP
• Azure Fundamentals
• AWS Cloud Practitioner
• Experience supporting Federal Government cybersecurity programs.
• Strong attention to detail
• Eagerness to learn
• Team-oriented
• Self-motivated
• Strong documentation skills
• Ability to work in a fast-paced government environment

Pulled from the full job description

• Professional development assistance
• Pet insurance
• 401(k) matching
• Paid time off
• Flexible spending account
• Disability insurance

Gray Analytics values our employees as our most important resource. To showcase these values, we offer not only traditional medical, disability, life, etc. coverages that begin on day one of employment, but also unique benefits to improve our employees’ quality of life. Some of these unique benefits include:

• A PTO policy based on total years of experience, not years of service to the company. PTO is available for use immediately at hire, subject to company needs.
• Eligibility for 401K contributions and company matching, Pet Insurance through Spot, Flexible Spending Account, and Tuition and Professional Development Funds begin on day one of employment.
• Charitable donations program on a yearly and quarterly basis where employees can nominate a non-profit of choice to receive donations.

Gray Analytics is an Equal Opportunity Employer and VEVRAA Federal Contractor. This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities and prohibit discrimination against all individuals based on their race, color, religion, sex, gender identity, sexual orientation, or national origin. Moreover, these regulations require that covered prime contractors and subcontractors take affirmative action to employ and advance in employment individuals without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, protected veteran status or disability. Gray Analytics, Inc. welcomes minority and veteran applicants.