What are the responsibilities and job description for the Mid ISSO / Security Analyst position at Emerging Tech?
Job Summary
Emerging Tech is seeking a Mid ISSO / Security Analyst to support the Department of Health and Human Services (HHS) Enterprise Shared Services (ESS) Line of Business (LoB) through its Security Consulting Services (SCS) Support initiative. The Security Analyst will provide consulting expertise, documentation review, and risk management support to ensure IT systems maintain compliance with NIST, FISMA, and Federal security standards. The ideal candidate will have proven experience in developing and interpreting security documentation, supporting RMF and continuous monitoring activities, and guiding customers through remediation of POA&Ms. This is a hybrid role requiring on-site support in the Washington, D.C., Maryland, and Virginia (DMV) area.
Responsibilities and Duties
Emerging Tech, LLC is an equal opportunity employer and prohibits discrimination and harassment of any kind. We are committed to providing a workplace that is inclusive and free of employment discrimination on the basis of race, color, religion, sex, national origin, age, disability, or any other status protected by applicable federal, state, or local law. This commitment extends to all aspects of employment, including hiring, promotion, transfer, compensation, benefits, training, social, and recreational activities.
We value diversity and strive to create a positive and inclusive work environment where all employees are treated with dignity and respect. Decisions regarding employment are made based on an individual's qualifications as they relate to the job for which they are applying.
Emerging Tech is seeking a Mid ISSO / Security Analyst to support the Department of Health and Human Services (HHS) Enterprise Shared Services (ESS) Line of Business (LoB) through its Security Consulting Services (SCS) Support initiative. The Security Analyst will provide consulting expertise, documentation review, and risk management support to ensure IT systems maintain compliance with NIST, FISMA, and Federal security standards. The ideal candidate will have proven experience in developing and interpreting security documentation, supporting RMF and continuous monitoring activities, and guiding customers through remediation of POA&Ms. This is a hybrid role requiring on-site support in the Washington, D.C., Maryland, and Virginia (DMV) area.
Responsibilities and Duties
- Review security-related documentation and implementation of security controls to ensure compliance with NIST, FISMA, and Federal regulations.
- Develop, update, and revise security documentation, including SA&A packages, security control assessments, and contingency planning materials.
- Support the Risk Management Framework (RMF) and continuous monitoring processes.
- Facilitate mitigation ofthe Plan of Action and Milestones (POA&Ms) to remediate identified weaknesses.
- Provide security consulting services and serve as a subject matter expert (SME) to ESS LoB customers and Office of Information Security (OIS) counterparts.
- Collaborate with ESS LoB staff and customers to:
- Develop, update, and deliver security-related documentation.
- Assess and review SA&A documentation to ensure compliance with laws, regulations, and best practices.
- Conduct annual security control assessments and contingency plan tabletop exercises.
- Review and modify customer security documentation to maintain quality and accuracy.
- Provide customer engagement support, including status reports, project plans, and meeting minutes.
- Attend customer meetings in person (unless otherwise noted) and support recurring or one-time customer requirements.
- Ensure flexibility to adapt to changing customer priorities and usage of agency tools/templates.
- 5–8 years of IT security experience in the Federal sector with a focus on security documentation and directives.
- Security , Network , or equivalent certification required.
- In-depth knowledge of Federal IT security laws, directives, and policies.
- Strong understanding of secured and non-secured environments and related security requirements.
- Familiarity with IT security products, technologies, protocols, and best practices.
- Experience writing documentation compliant with NIST, FISMA, and FISCAM requirements.
- Knowledge of NIST 800-53 Rev 5 (or latest revision) with the ability to document security control implementation statements.
- Strong written and oral communication skills for collaboration with customers, stakeholders, and system personnel.
- Benefits: Comprehensive health, dental, and vision benefits
- Retirement: 401K savings plan with company match
- Work Environment: Remote flexibility with occasional travel to federal sites as needed
- Paid Time Off (PTO): Generous PTO and federal holidays
- Performance Evaluation/Retention Bonus: Opportunity for performance-based bonuses
Emerging Tech, LLC is an equal opportunity employer and prohibits discrimination and harassment of any kind. We are committed to providing a workplace that is inclusive and free of employment discrimination on the basis of race, color, religion, sex, national origin, age, disability, or any other status protected by applicable federal, state, or local law. This commitment extends to all aspects of employment, including hiring, promotion, transfer, compensation, benefits, training, social, and recreational activities.
We value diversity and strive to create a positive and inclusive work environment where all employees are treated with dignity and respect. Decisions regarding employment are made based on an individual's qualifications as they relate to the job for which they are applying.
