Information Security Analyst Principal

Responsibilities

• Provide support for DHHS information security
• Facilitate security infrastructure and define future programs
• Design and implement firewalls and related security issues
• Analyze information systems for appropriate security functions in design and architecture
• Conduct security impact assessments for development changes
• Implement countermeasures or mitigating controls
• Manage responses and remediation of POAMs
• Stay informed on emerging security requirements like Zero Trust and SBOM
• Act as a conduit between GDIT and customer security organizations

Requirements

• Bachelor's Degree in IT Security, Computer Science, or related technical discipline with 10 years experience (or Master's with 8, or PhD with 6)
• IT Security implementation and monitoring experience
• Familiarity with Agile SDLC methodology
• Expert knowledge of data security administration principles
• Understanding of network configuration and monitoring
• Knowledge of federal security policies including FIPS 199, FIPS 200, and NIST 800-53
• Security certification such as CISSP or CISA

Preferred Qualifications

• Familiarity with Electronic Healthcare technology and operations
• Knowledge of VistA or RPMS electronic health records
• Understanding of HHS Enterprise Performance Life Cycle (EPLC)
• Familiarity with Source Code Control/Version Management software

Benefits

• Full-flex work week with core hours
• 401K with company match
• Comprehensive health and wellness packages
• Professional growth opportunities including paid education and certifications
• Paid vacation, holidays, and parental leave
• Remote work options