IT Security Analyst / Assessor
- Location
- Washington, DC · On-site
- Job type
- Full-time
- Level
- Senior
- Experience
- 5+ years
- Education
- Bachelor's degree
- Listed
- 30 days ago
Skills & highlights for this role
- Security+
- Active Public Trust clearance
- US citizenship
- NIST 800-53
- NIST SP 800-37 RMF
- vulnerability scanning (Nessus, WebInspect)
Also useful
- CSAM
Information System Security Analyst duties include
- Perform Certification & Accreditation (C&A), System Assessment & Authorization (SA&A) as part of NIST SP 800-37 Risk Management Framework (RMF) system and application accreditation
- Prepare Vulnerability Scanning test plans, coordinate testing, and conduct scans using Nessus, Foundstone, WebInspect, Hailstorm and other scan applications
- Analyze vulnerability scan results for validation and root cause
- Technical support in the areas of vulnerability assessment, risk assessment, network security, product evaluation, and security implementation.
- Responsible for the design and implementation of security solutions to protect the confidentiality, integrity, and availability of sensitive information.
- Provide technical evaluations of customer CM and CMI solutions and provide security recommendations.
Participate in the design of information system business impact analysis, system categorization, contingency plans, privacy documents, and other system security documentation to maintain appropriate levels of protection and meet requirements for minimizing operational impact to the enterprise.
Conduct testing and audit log reviews to evaluate the effectiveness of current security measures.
IT Security Control Assessor needs to possess the following skills
- 5+ years of experience conducting security control assessment of all NIST 800-53 controls
- Knowledge of NIST 800-53 security controls and required documentation.
- Conducted security control assessments based on a Risk Management Framework approach.
Qualifications
US Citizen
- Certification(s) in information technology (i.e. Security+,)
- BS degree in a computer or system science discipline from an accredited college or university.
- Working experience in Federal Government Contracts is a must.
- Active Public Trust Clearance (adjudicated within past 5 years) is a must.
Additional Information
All your information will be kept confidential according to EEO guidelines.
About the Company
NXTKey Corporation has been delivering Information Technology, Information management, Information Assurance (IA) and cybersecurity solutions to US Federal Government since 2005.
NXTKey Corporation is an agile Small Business that places emphasis on teamwork and partnership with our clients to produce optimum contract performance. We have refined our solution from experience supporting highly complex Department of Justice (DOJ) environments such as United States Marshals Service (USMS), Justice Management Division (JMD), Office of Justice Programs
(OJP) and Federal Prison Industries (FPI).
Our depth of experience allows us to provide IT security support for a wide range of IT General Support Systems (GSS) and major applications (MAs) within the Federal Enterprise and following the guidance in the Federal Enterprise Architecture (FEA) and information systems security support services in accordance with OMB Circular A-130, NIST guidelines and standards, as well as other federal policies and regulations.
From NXTKEY CORPORATION's careers page, first listed on Rolev.ai on October 10, 2026. Rolev.ai is not the employer.
How Rolev.ai helps with this application
Rolev.ai is a job search and application tool for US job seekers. For this IT Security Analyst / Assessor role at NXTKEY CORPORATION, it shows how your resume fits, tailors your resume to the posting, and prepares the application for you to review.
See how you fit
Openings from employer career sites are ranked against your whole resume—and searchable inside Claude, ChatGPT, and Cursor via Rolev.ai MCP.
Tailor without inventing
Every change to your resume is checked against your original. New experience goes in only with your yes—zero fabricated claims.
Draft the full kit
Tailored and Full Match resumes, role-specific cover letters, and answers to employer screening questions are prepared in seconds.
1-Click Extension Autofill
The Chrome extension fills the employer's Greenhouse, Workday, Lever, or Ashby form in 1 click. You review it and press Submit.
Similar roles
All Information Security Analyst jobs- Information Security AnalystAppian Corporation · McLean, VA
- Information Security AnalystTenable, Inc. · Headquarters, MD
- Mission Application Analyst (Journeyman)CACI · Ashburn, VA
- Information Security AdministratorDabella · Austin, TX
- Principal DevOps Engineer (Top Secret Clearance)Ngc · Manhattan Beach, CA · $114k – $171k/yr
- Infrastructure Engineering Senior Analyst, Networking - Cigna HealthcareCigna · Missoula, MT
Common questions
Where is the IT Security Analyst / Assessor job at NXTKEY CORPORATION located?
This IT Security Analyst / Assessor position at NXTKEY CORPORATION is located in Washington, DC (On-site). Always check NXTKEY CORPORATION's application page for specific state eligibility or relocation policies.
What qualifications are required for IT Security Analyst / Assessor at NXTKEY CORPORATION?
For the IT Security Analyst / Assessor role, NXTKEY CORPORATION highlights 5+ years of relevant experience; a bachelor's degree; experience with NIST 800-53, NIST SP 800-37 RMF, vulnerability scanning (Nessus, WebInspect). Rolev.ai can score your existing resume against these requirements and show any skill gaps before you apply.
How do I apply for the IT Security Analyst / Assessor position at NXTKEY CORPORATION?
This listing links directly to NXTKEY CORPORATION's SmartRecruiters application page. You can apply directly on NXTKEY CORPORATION's site, or use Rolev.ai to check your resume fit, generate a zero-hallucination tailored resume and cover letter for this posting, and autofill the SmartRecruiters application form in 1 click with the Rolev.ai Chrome extension. You always review the form and press Submit yourself.