Information Security Analyst

SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.

This is a contingent position based upon contract win.

SkyePoint Decisions is seeking an Information Security Analyst to support a Department of State cybersecurity program. The Information Security Analyst will assist in protecting enterprise systems, networks, and data by implementing security controls, conducting risk assessments, monitoring compliance, and supporting cybersecurity operations across classified and unclassified environments.

The successful candidate will have experience with federal cybersecurity frameworks, security control implementation, compliance monitoring, vulnerability management, and Risk Management Framework (RMF) processes. This position requires the ability to work closely with government stakeholders, technical teams, and cybersecurity leadership.

This location of this position is still TBD but expected to be in a DOS office. Hybrid work will be allowed.  

Responsibilities:

• Support the implementation and monitoring of cybersecurity controls in accordance with NIST SP 800-53, Department of State policies, and federal security requirements.
• Assist with Risk Management Framework (RMF) activities, including security control implementation, assessment, authorization, and continuous monitoring.
• Conduct security assessments, compliance reviews, and risk analyses for information systems and applications.
• Monitor system security posture and identify vulnerabilities, threats, and compliance gaps.
• Assist in developing and maintaining cybersecurity documentation.
• Support security control lifecycle management from implementation through ongoing assessment and remediation.
• Analyze vulnerability scan results and coordinate remediation efforts with system administrators and engineering teams.
• Ensure compliance with FedRAMP, FISMA, and Department of State cybersecurity requirements.
• Participate in incident response activities, investigations, and forensic support efforts as required.