Security Impact Analysis Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
SIA Engineer supporting TSA information-system security impact analyses and RMF compliance. Evaluating cybersecurity risks, controls, architectures, and authorization documentation for Titan Technologies.
Responsibilities:
- Conduct Security Impact Analyses (SIAs) and assess Requests for Change (RFCs) to evaluate potential cybersecurity impacts to TSA information systems
- Review and analyze RMF artifacts, security documentation, and supporting system records to support risk management and authorization activities
- Assess system designs, technical solutions, implementation approaches, and emerging technologies for security, compliance, and risk considerations
- Support security control assessments and evaluate the effectiveness of controls in accordance with established assessment methodologies
- Perform cybersecurity risk analyses and provide recommendations to support authorization decisions and compliance requirements
- Review network and infrastructure components as part of technical and security impact assessments
- Analyze scan results, assessment findings, and compliance data to identify risks and recommend corrective actions
- Support the development and improvement of Security Authorization (SA) and Ongoing Authorization (OA) processes and procedures
- Document assessment activities, findings, recommendations, and stakeholder discussions
Requirements:
- Active Secret clearance required
- Must be able to obtain TSA clearance
- Knowledge of the NIST Risk Management Framework (RMF), cybersecurity compliance, and risk management principles
- Experience conducting Security Impact Analyses (SIAs), risk assessments, or cybersecurity assessments
- Experience reviewing and analyzing RMF artifacts, security documentation, and system authorization deliverables
- Knowledge of security control assessments, risk analysis methodologies, and cybersecurity governance processes
- Ability to evaluate system changes, technical implementations, and security impacts to support risk-based decision-making
- Experience analyzing assessment results, vulnerabilities, compliance findings, and technical risks
- Strong analytical, problem-solving, and communication skills
- Familiarity with Security Authorization (SA) and Ongoing Authorization (OA) processes
- Knowledge of NIST Special Publications 800-30, 800-37, and 800-53A
- Experience reviewing security plans, contingency plans, configuration management documentation, privacy artifacts, and related RMF deliverables
- Familiarity with FISMA compliance and cybersecurity assessment activities
- Experience evaluating network infrastructure, system architectures, and technical implementation approaches
- Knowledge of emerging technology assessments and cybersecurity compliance requirements
- BA/BS degree in Cybersecurity, Information Technology, or a related discipline
Similar Jobs
Senior Information Security Specialist
Senior Information Security Specialist advancing GRC, third-party risk, compliance, and incident readiness. Supporting Halcyon’s adaptive platform dedicated to stopping ransomware.
Senior Security Control Assessor – FedRAMP 3PAO
Senior FedRAMP assessor leading cloud security compliance audits for Insight Assurance, a global cybersecurity and compliance audit firm. Evaluating NIST controls and mentoring assessment teams.
Junior Information Security and Privacy Consultant
Consultor de segurança da informação e privacidade apoiando assessments, avaliações de riscos e adequação a frameworks. Elaborando relatórios e recomendações para projetos de clientes diversos.
Senior Security Control Assessor, SCA
Senior Security Control Assessor supporting TSA’s cybersecurity governance, risk, and compliance mission. Evaluating security controls, authorization packages, vulnerabilities, and remediation activities.
Senior Cybersecurity Engineer, TS/SCI Clearance Required
ACAS cybersecurity engineer managing Nessus-based vulnerability assessment and DoD compliance. Supporting Air Operation Center cybersecurity, remediation, and incident reporting.
Head of Cyber Security
Head of Cyber Security leading cybersecurity strategy and governance for ABB’s global Process Control Platform. Protecting automation products through risk management, compliance, Linux and Kubernetes expertise.
Staff Product Security Engineer
Staff Product Security Engineer leading penetration testing across Guidewire’s cloud insurance platform. Securing web applications, APIs, SaaS architectures, and AI-powered product features.
Information Systems Security Officer
Information Systems Security Officer leading RMF authorization and cybersecurity compliance for federal on-premises and AWS systems. Managing eMASS, STIGs, vulnerability remediation, and continuous monitoring.
Staff Security Engineer – AppSec
Staff AppSec Engineer definindo segurança para produtos de pagamentos da Stone, incluindo aplicações com LLMs e IA generativa. Proteção de APIs, cloud, CI/CD e sistemas de produção.
Security Engineer II
Security Engineer securing Iovance’s cloud, identity, endpoint, email, and DevSecOps platforms. Supporting audit-ready security operations for a company developing TIL cancer therapies.
Application Security Developer III
Application security developer securing CareSource web, mobile, and service applications. Testing vulnerabilities, reviewing code, and automating security tools and processes.
Security Engineer – Agentic AI
Security Engineer securing agent gateways, tools, models, and data flows. Building production controls for BRAHMA AI’s enterprise media technology platform.
Senior Cybersecurity Specialist
Abbott Senior Cybersecurity Specialist conducting threat modeling and risk assessments. Securing healthcare product architectures and supporting regulatory cybersecurity activities.
Oracle Cloud Security Expert
Oracle Cloud Security Expert designing and implementing Oracle SaaS security controls for Highstreet. Managing roles, audits, access governance, patch testing, and compliance.
Security Specialist
Security Specialist conducting NIST-based vendor risk assessments for North Carolina government IT. Delivering inventories, risk registries, and assessment reports.
Senior Application Security Researcher
Senior Application Security Researcher advancing AI-driven application vulnerability detection. Building agentic penetration-testing capabilities with engineers, researchers, and AI/data scientists.
Senior Information Security Engineer
Senior Information Security Engineer building secure modules for Walrus’s B2B payment verification platform. Designing authentication, payments, and reputation capabilities with the core engineering team.
Security Engineer
Security Engineer securing Noxtua’s sovereign Legal AI cloud infrastructure, GPU systems, and AI workloads. Building DevSecOps controls and supporting ISO 27001, BSI C5, and TISAX compliance.
Cybersecurity Consultant
Part-time remote cybersecurity consultant securing Scopic’s software delivery, cloud environments and compliance. Building Secure SDLC practices and mentoring the internal Security Lead.
Senior Security Engineer
Senior Security Engineer protecting Technosylva’s cloud-hosted platform through cloud, AI, vulnerability, and incident security. Automating controls and advising infrastructure, platform, and IT teams.