Information Security Analyst - Hybrid (Atlanta, GA)

Information Security Analyst Hybrid (Atlanta, GA)

Location: Atlanta, GA 30334

Work Arrangement: Hybrid (onsite as directed; remote otherwise)

Type: Contract | Full-Time

Duration: October 13, 2025 June 30, 2026

Interview: Web Cam Interview Only

Openings: 1

Job Overview

Seeking an Information Security Analyst to safeguard Controlled Unclassified Information (CUI) and monitor enterprise systems using tools like CrowdStrike, Splunk, and Tenable. The role involves vulnerability and risk management, incident response, compliance support, audit readiness, and security awareness training aligned with federal and agency regulations.

Key Responsibilities

• Continuously monitor security events and respond to incidents impacting CUI using CrowdStrike (EDR), Splunk (SIEM), and Tenable (Vulnerability Management)

• Manage vulnerability assessments, patch, and configuration management

• Maintain and update System Security Plans (SSP), support audits (IRS, CMS, SSA, NIST, FISMA)

• Lead targeted security awareness programs and specialized training for privileged users

• Provide incident triage, documentation, root cause analysis, and collaborate on containment/recovery

• Deliver executive-level security reports, compliance status, and risk posture updates

• Ensure IT security best practices for cloud and endpoint environments

• Support remediation tracking and maintain audit readiness

Required Qualifications

• Bachelor's degree in Information Security, Cybersecurity, IT, or related field (or equivalent experience; preference for State of Georgia experience)

• Hands-on experience with Splunk, CrowdStrike Falcon, and Tenable Nessus/Tenable.sc

• Strong knowledge of CUI protection, NIST, FISMA, IRS Pub 1075, CMS, SSA compliance

• Experience in incident response, vulnerability management, and risk assessment

• Excellent analytical, documentation, and communication skills

Highly Desired Qualifications

• Professional certifications (CompTIA Security+, CySA+, CISSP, CISM, GIAC) (must upload certification)

• Experience managing SSPs and audit readiness

• Familiarity with cloud and endpoint security technologies

• Prior experience delivering security awareness training