Assessment Analyst

The role

You will perform security assessments in support of FedRAMP and NIST-based frameworks. This includes conducting interviews, performing technical tests, and preparing deliverables.

What you will do

• Conduct interviews of key stakeholders and technical personnel
• Perform technical tests alongside security engineers
• Record meeting minutes and maintain work papers
• Maintain a consistent writing style and approach to documenting results
• Collaborate with delivery team members to meet project deliverables
• Ensure quality products and services are delivered on time
• Establish and maintain positive collaborative relationships with clients and stakeholders
• Pursue continuous professional development in industry specific certifications
• Improve assessment interviewing techniques
• Prepare deliverables and conduct peer-review of team member's deliverables

Required qualifications

• Bachelor's Degree or equivalent job experience
• 2+ years of professional services experience
• 2+ years of assessment experience leveraging NIST SP 800-53, specific to cloud environments
• CYSA+ certification
• Proficient in Microsoft 365 product suite
• Ability to quickly take on new technologies and concepts
• Ability to manage multiple priorities simultaneously
• Proven analytical and problem-solving skills
• Ability to develop and maintain strong relationships with team members and clients
• Comfortable supporting fast-paced team environments

Nice to have

• Ability to validate automated evidence pipelines, such as querying an API and reading/understanding logs
• Basic scripting and understanding of JSON
• Basic understanding of Terraform
• Advanced technical certifications, such as: AWS solutions architect, Google cloud engineer, Microsoft solutions architect

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• 401K plan with a 4% match
• Company paid short-term disability
• Company paid long-term disability
• Company paid AD&D and life insurance
• Flex time off
• Annual bonuses
• Training stipends
• Certification reimbursements
• Access to over 30,000 free online training courses

Before you apply

• All persons hired will be required to verify identity and eligibility to work in the United States

About the company

Fortreum is a leader in cloud and cybersecurity services, ranked among the Top 5 FedRAMP Third Party Assessment Organizations (3PAO). They deliver independent, third-party, vendor-agnostic regulatory assessment and advisory services.