Information security analyst principal

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Information Security Analyst Principal based in United States.

This senior cybersecurity role supports federal information security programs and helps protect complex systems in a mission-driven environment.

You will assess security architecture, guide secure system development, and help implement effective controls across critical technology environments.

The position combines security analysis, risk management, compliance, infrastructure protection, and advisory responsibilities.

You will work closely with technical teams and customer security organizations to address vulnerabilities, manage remediation, and strengthen security practices.

The role also requires staying current with emerging requirements such as Zero Trust and Software Bill of Materials (SBOM) initiatives.

You will contribute to security documentation, operational procedures, system assessments, and long-term security program improvements.

Accountabilities:

As an Information Security Analyst Principal, you will provide senior-level cybersecurity expertise across security architecture, risk management, compliance, and system protection. Key responsibilities include:

• Support federal information security programs and security initiatives for healthcare-related government systems.
• Help maintain existing security infrastructure and contribute to the design and implementation of future security programs.
• Provide expertise on firewalls and other information security technologies and controls.
• Analyze information systems to ensure appropriate security functions are incorporated into system design and architecture.
• Participate in software development processes by advising developers and conducting security impact assessments for system changes.
• Assist with implementing security countermeasures and mitigating controls.
• Develop, maintain, and improve Standard Operating Procedures, System Security Plans, Security Manuals, and related security documentation.
• Manage responses and remediation activities for Plans of Action and Milestones (POA&Ms) associated with supported government systems.
• Monitor evolving security requirements and communicate their potential impact to technical and security teams.
• Support emerging cybersecurity initiatives, including Zero Trust and Software Bill of Materials (SBOM) practices.
• Serve as a key liaison between internal technical teams and customer security organizations.
• Maintain current knowledge of relevant cybersecurity technologies, practices, policies, and standards.
• Participate in special security projects and initiatives as required.

Requirements:

The ideal candidate brings extensive information security experience, strong knowledge of federal cybersecurity requirements, and the ability to advise technical and non-technical stakeholders. You should be comfortable working independently on complex security challenges while maintaining a strong focus on compliance and risk reduction.

• Bachelor’s degree in IT Security, Computer Science, or a related technical discipline with 10 years of related experience, or a Master’s degree with 8 years, or a PhD/Doctorate with 6 years of related experience.
• 10+ years of relevant information security or cybersecurity experience.
• Demonstrated experience implementing and monitoring IT security controls and services.
• Expert knowledge of data security administration principles, methods, and techniques.
• Broad knowledge of information assurance practices, security technologies, and security tools.
• Understanding of network configuration, monitoring, and security architecture.
• Familiarity with domain structures, user authentication, and digital signatures.
• Working knowledge of Agile Software Development Lifecycle methodologies.
• Strong understanding of federal security policies and standards, including FIPS 199, FIPS 200, and NIST 800-53.
• CISSP, CISA, or another relevant security certification; CISSP preferred.
• Ability to analyze complex security requirements and translate them into practical controls and recommendations.
• Strong written and verbal communication skills, with the ability to collaborate across technical and customer organizations.
• Ability to manage multiple priorities and contribute effectively to special projects.
• Familiarity with electronic healthcare technologies and operations is preferred.
• Experience with source code control or version management software is preferred.
• Knowledge of VistA electronic health records or Resource Patient Management System (RPMS) is a plus.
• Familiarity with the Department of Health and Human Services Enterprise Performance Life Cycle (EPLC) is a plus.
• Must be able to pass the required background investigation to obtain an appropriate Public Trust clearance.

Benefits:

Salary range of $110,500–$149,500, with final compensation based on factors including experience, geographic location, and contractual requirements.

Fully remote work within the United States.

Full-flex work week with core hours from Monday to Friday, 9:00 AM–3:00 PM ET.

• 401(k) plan with employer matching.
• Comprehensive medical, dental, and vision plan options, including plans with Health Savings Accounts.
• Paid vacation, sick, personal, and holiday leave.
• Typically 15 days of paid leave per calendar year for new employees, prorated based on start date.
• 10 paid holidays annually.
• Paid parental, military, bereavement, and jury duty leave.
• Up to 160 hours of paid family leave in a rolling 12-month period for eligible employees.
• Short- and long-term disability coverage.
• Life, accidental death and dismemberment, personal accident, critical illness, and business travel insurance options.
• Paid education and professional certification opportunities.
• Internal career mobility support and professional growth opportunities.
• Exposure to advanced technologies across cybersecurity, AI, cloud, and software development.
• Challenging mission-driven work with meaningful public-sector impact.
• Less than 10% travel expected.