What are the responsibilities and job description for the Information Security Analyst (Journeyman) position at Oasys International, LLC?
Who We Are: Oasys International, LLC (Oasys) is a rapidly expanding firm that has been recognized on Inc. 5000 magazine's list of the fastest-growing companies for five consecutive years. We are a dynamic organization dedicated to providing world-class technology consulting services through our team of expert technologists, consultants, engineers, and subject matter experts. At Oasys, we prioritize continuous learning, a healthy work-life balance, and a collaborative work environment. Our culture is merit-based, recognizing and rewarding performance and fostering a supportive and social atmosphere.
Position Summary:
Oasys is seeking an Information Security Analyst support the United States Coast Guard (USCG) at the Aviation Logistics Center (ALC)-Information Systems Division (ISD). The Information Security Analyst will support ongoing cybersecurity operations, continuous monitoring, risk assessments, and security compliance activities aligned with the DHS 4300A, NIST 800-53, and RMF standards.
The successful candidate will work closely with security engineers, system administrators, auditors, and federal stakeholders to evaluate and implement effective security measures that protect mission-critical systems and ensure audit readiness.
Primary Responsibilities:
- Support the implementation, monitoring, and continuous improvement of cybersecurity controls across enterprise systems, networks, and applications.
- Participate in and support the full lifecycle of the Risk Management Framework (RMF), including security categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
- Monitor and analyze alerts and logs from Security Information and Event Management (SIEM) systems to identify threats and suspicious activities.
- Conduct vulnerability scans, assist in POA&M development, and provide recommendations for remediation and mitigation strategies.
- Review and support the development of System Security Plans (SSPs), Security Assessment Reports (SARs), Contingency Plans (CPs), and Incident Response Plans (IRPs).
- Conduct cyber risk assessments on systems, applications, and infrastructure to identify potential security gaps and recommend improvements.
- Assist in drafting and reviewing security documentation, audit findings, after-action reports, and compliance assessments.
- Collaborate with security control assessors to validate control implementations and test compliance to internal policies and federal guidelines.
- Support awareness and training initiatives to promote cybersecurity best practices across program teams.
- Provide input into policy, procedure, and standard development to ensure alignment with federal regulations and emerging threats.
- Evaluate security solutions and provide input on system security designs, ensuring defense-in-depth strategies.
- All other duties as assigned by management.
Skills/Qualifications:
- Understanding of cybersecurity principles, RMF processes, and federal compliance requirements.
- Hands-on experience with vulnerability management, log analysis, or SIEM operations.
- Familiarity with network security, identity and access management, and endpoint protection.
- Basic proficiency in federal cybersecurity frameworks including FISMA, DHS 4300A, NIST 800-53, and NIST 800-37.
- Ability to develop security documentation and effectively communicate findings to both technical and non-technical audiences.
- Strong analytical, organizational, and documentation skills.
Education/Experience Requirements:
- Bachelor's or Associate's degree in Computer Science, Math, Information Technology, Engineering, or related field. Two (5) years of directly relevant experience may substitute for one (1) year of formal education.
- Minimum of two (2) years of experience in Information security as analyst or in security operations.
- Minimum of two (2) years of experience with Security Information and Event Management (SIEM).
- Minimum of two (2) years of experience in the risk management framework.
- Basic knowledge of the following: Active Directory, UNIX, Windows, Relational Databases.
- Demonstrated experience working in support of federal government enterprise applications preferred.
Clearance:
- U.S. citizenship required
- Must have an active DoD Secret Clearance.
Certification Requirement
- CompTIA Security
- Additional certifications (Network , AWS Certified Cloud Practitioner, Microsoft Azure Fundamentals, ITIL Foundation, TOGAF, or other security architecture frameworks) are a plus.
Work Location:
- Elizabeth City, NC - On-Site (Full-Time)
Oasys is proud to be an equal opportunity employer for all protected groups, including protected veterans and individuals with disabilities.
Oasys is committed to hiring and retaining a diverse workforce. We are proud to be an Equal Opportunity/Affirmative Action Employer, making decisions without regard to race, color, religion, creed, sex, sexual orientation, gender identity, marital status, national origin, age, veteran status, disability, or any other protected class. U.S. Citizenship is required for most positions.