Information Security Analyst, Junior

$75,600 - $98,000/Yr

Lcg

Full-time - Entry Level

Administrative and Support Services

About the position

As a Junior Information Security Analyst, you will support the security of the organization's cloud infrastructure and information assets. This entry-level role involves implementing security measures, ensuring compliance with security standards, and collaborating with team members to protect against unauthorized access and data breaches.

Responsibilities

• Implement security measures for cloud environments to protect systems and data from unauthorized access, breaches, or destruction.
• Assist in the development and maintenance of security documentation, ensuring compliance with federal regulations (NIST, FIPS), and NIH standards.
• Perform security assessments and vulnerability scans for cloud-based services and help remediate any identified vulnerabilities.
• Collaborate with the Cloud Services team to ensure security controls are in place and maintained across all environments.
• Assist in the Assessment and Authorization (A&A) process for cloud services, supporting the creation and maintenance of Authority to Operate (ATO) documentation.
• Help develop and enforce security policies, standards, and procedures, monitoring compliance across departments.
• Provide security-related input on the cloud architecture to ensure alignment with NIH's strategic goals and industry best practices.
• Support the security operations team in continuous monitoring, detection, and response to potential cloud security incidents.
• Work with end-users to gather security requirements, addressing the specific needs of individual departments.
• Support the automation of security tasks, including integrating security configurations and compliance checks through GitHub and Azure AD.

Requirements

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field, or equivalent work experience.
• 0-2 years of related experience in information security, cybersecurity, or cloud security.
• Basic knowledge of cloud environments (e.g., AWS, Azure, Google Cloud), cloud security practices, and federal regulations.
• Familiarity with NIST, FIPS, and other government-wide security policies and standards.
• Strong communication and collaboration skills, with the ability to work with cross-functional teams.
• Detail-oriented and willing to learn, with an interest in cloud security operations.
• Experience with cloud service providers (AWS, Azure, GCP) and related security operations.
• Basic scripting or automation experience (e.g., GitHub, GitHub Actions, PowerShell, or Python).
• Certifications such as CompTIA Security+, AWS Certified Cloud Practitioner, or similar entry-level security/cloud certifications.

Benefits

• Health insurance options (medical, dental, vision)
• Life and disability insurance
• Retirement plan contributions
• Paid leave
• Federal holidays
• Professional development
• Lifestyle benefits