IT Security Analyst

We need to output HTML fragment with sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. No job title heading. No Job ID etc. Remove boilerplate. Must preserve all substantive info. We need to parse the posting. Key sections: - About the role: description of role: "Lynker Corporation is seeking a high-performing IT Security Analyst to safeguard mission-critical infrastructure for the National Data Buoy Center (NDBC). Working directly with the federal Information System Security Officer (ISSO) and contractor technical staff, you will ensure NDBC systems maintain a robust security posture, maintain continuous Authority to Operate (ATO), and adhere to federal cybersecurity standards while supporting operational mission requirements. The ideal IT Security Analyst selected will be able to work onsite at the Stennis facility." That's about the role. - Responsibilities: list of duties: bullet points from "Duties of the IT Security Analyst will include the following" then list. Let's extract: - Support the ISSO in maintaining all Risk Management Framework (RMF) artifacts, including System Security Plans (SSPs), Risk Assessment Reports (RARs), and Plans of Action and Milestones (POA&Ms). - Lead technical teams through internal and external security audits (e.g., DOC, GAO, OIG) and the annual Assessment and Authorization (A&A) process. - Gather evidence, document audit paths, and drive remediation actions to ensure continuous ATO. - Execute routine vulnerability scans using enterprise tools (e.g., Tenable Nessus/ACAS) and guide technical teams in hardening operating systems, databases, and network devices according to DISA STIGs and CIS Benchmarks. - Perform Security Impact Analyses (SIA) for proposed hardware, software, and configuration changes to evaluate risk and ensure compliance with NIST SP 800-53 controls. - Monitor system logs to identify, isolate, and mitigate potential threats across hybrid infrastructure. - Translate complex security controls into actionable requirements for IT personnel, while effectively communicating risk and compliance status to non-technical stakeholders and leadership. - Ensure related documentation is kept current. That's responsibilities. - Education Requirements: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent. - Certificate Requirements: Minimum of Security+ certification; CISSP certification is preferred. - Experience: 5+ years of progressive experience in cybersecurity, with a heavy focus on federal Information Assurance (IA) and the Risk Management Framework (RMF). Proven track record working within federal agency guidelines (e.g., NOAA, DOC, GAO, OIG) and navigating complex internal/external audit cycles. Deep, practical understanding of NIST SP 800-53 (Revision 4/5) security controls and the 7-step RMF process. Demonstrated ability to author and defend highly technical artifacts, including System Security Plans (SSPs), Risk Assessment Reports (RARs), and Plan of Action and Milestones (POA&Ms). Proficiency in translating DISA STIGs and CIS Benchmarks into actionable technical requirements for operating systems, databases, and network devices. Advanced experience operating and analyzing data from enterprise scanning tools, specifically Tenable Nessus, SecurityCenter, or ACAS. Experience navigating SIEM platforms and security dashboards to monitor system logs, correlate events, and isolate anomalies. Ability to conduct technical Security Impact Analyses (SIA) to determine how proposed system, hardware, or software changes will affect the overall security baseline. Strong technical background and able to liaison between technical IT personnel and stakeholders. Extensive knowledge of implementing security controls on Windows and Linux systems, both onsite and in a cloud environment (Amazon Web Services (AWS) and Microsoft Azure environments). Excellent communication skills with an ability to translate technical concepts for diverse stakeholders. Well organized, with an attention to detail. - Other: Must be able to successfully complete a NOAA (Stennis Space Center)/NASA background investigation for site/system access. Must be able to obtain and maintain facility credentials/authorization. Must be able to obtain and maintain a Public Trust clearance. Note US Citizenship or a valid Green Card is required for facility credentials/authorization at this work location. We can group these under Requirements (maybe Education, Certifications, Experience, Other). The instruction says use sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We need to decide where to put each piece. We have Education Requirements, Certificate Requirements, Experience, Other. Could be under Requirements (maybe combine). Qualifications maybe overlapping. Skills maybe specific technical proficiencies. Benefits we have a list. Pay and Schedule: not mentioned, so we should NOT include those sections. Thus we will output sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits. But we need to avoid duplication. Let's map: - About the role: paragraph as above. - Responsibilities: ul list of duties. - Requirements: could include Education Requirements, Certificate Requirements, Experience (years, federal IA, RMF, etc.), Other (background investigation, clearance, citizenship). Might also include "Proven track record..." etc. That's experience. - Qualifications: maybe the specific abilities like "Demonstrated ability to author and defend highly technical artifacts..." but that's also experience. Could separate: Qualifications: deep understanding of NIST SP 800-53, ability to author artifacts, proficiency translating STIGs, advanced experience with scanning tools, experience with SIEM, ability to conduct SIA, strong technical background, liaison, extensive knowledge of implementing controls on Windows/Linux, cloud (AWS/Azure), excellent communication, well organized. - Skills: maybe technical skills like Tenable Nessus, SecurityCenter, ACAS, SIEM platforms, DISA STIGs, CIS Benchmarks, NIST SP 800-53, Windows/Linux, AWS, Azure, etc. But we might overlap. We need to avoid filler. Let's think: The posting already has sections: Education Requirements, Certificate Requirements, then a big paragraph of experience/qualifications. We could treat that as "Requirements" (including education, certs, experience, other). Then we could have "Skills" for specific technical proficiencies (like Tenable Nessus, etc.) but that may be redundant. Better to follow instruction: Prefer a few substantive sections over many thin ones. So maybe we combine into About the role, Responsibilities, Requirements (which includes education, certs, experience, other, qualifications, skills). Benefits separate. Thus we output:

About the role

...

Responsibilities

• ...
...

Requirements

... combine education, certs, experience, other, qualifications, skills into prose? But we need to use

• for any list of duties/requirements/benefits. So for requirements we should use a list. So we can list each requirement as
• . That is okay. Thus we will produce a
  under Requirements with items: Bachelor's degree..., Minimum Security+ certification; CISSP preferred, 5+ years..., Proven track record..., Deep practical understanding..., Demonstrated ability..., Proficiency..., Advanced experience..., Experience navigating SIEM..., Ability to conduct..., Strong technical background..., Extensive knowledge..., Excellent communication..., Well organized..., Must be able to complete background investigation..., Must be able to obtain/maintain facility credentials..., Must be able to obtain/maintain Public Trust clearance..., US Citizenship or valid Green Card required. That covers all. Benefits: list from Lynker's benefits. We need to ensure we don't include boilerplate like EEO etc. The benefits list includes many items; we should include them all as list items. We must not include sections like Pay or Schedule. Thus final HTML fragment:

  About the role

  Lynker Corporation is seeking a high-performing IT Security Analyst to safeguard mission-critical infrastructure for the National Data Buoy Center (NDBC). Working directly with the federal Information System Security Officer (ISSO) and contractor technical staff, you will ensure NDBC systems maintain a robust security posture, maintain continuous Authority to Operate (ATO), and adhere to federal cybersecurity standards while supporting operational mission requirements. The ideal IT Security Analyst selected will be able to work onsite at the Stennis facility.

  Responsibilities

  • Support the ISSO in maintaining all Risk Management Framework (RMF) artifacts, including System Security Plans (SSPs), Risk Assessment Reports (RARs), and Plans of Action and Milestones (POA&Ms).
  • Lead technical teams through internal and external security audits (e.g., DOC, GAO, OIG) and the annual Assessment and Authorization (A&A) process.
  • Gather evidence, document audit paths, and drive remediation actions to ensure continuous ATO.
  • Execute routine vulnerability scans using enterprise tools (e.g., Tenable Nessus/ACAS) and guide technical teams in hardening operating systems, databases, and network devices according to DISA STIGs and CIS Benchmarks.
  • Perform Security Impact Analyses (SIA) for proposed hardware, software, and configuration changes to evaluate risk and ensure compliance with NIST SP 800-53 controls.
  • Monitor system logs to identify, isolate, and mitigate potential threats across hybrid infrastructure.
  • Translate complex security controls into actionable requirements for IT personnel, while effectively communicating risk and compliance status to non-technical stakeholders and leadership.
  • Ensure related documentation is kept current.

  Requirements

  • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent.
  • Minimum of Security+ certification; CISSP certification is preferred.
  • 5+ years of progressive experience in cybersecurity, with a heavy focus on federal Information Assurance (IA) and the Risk Management Framework (RMF).
  • Proven track record working within federal agency guidelines (e.g., NOAA, DOC, GAO, OIG) and navigating complex internal/external audit cycles.
  • Deep, practical understanding of NIST SP 800-53 (Revision 4/5) security controls and the 7-step RMF process.
  • Demonstrated ability to author and defend highly technical artifacts, including System Security Plans (SSPs), Risk Assessment Reports (RARs), and Plan of Action and Milestones (POA&Ms).
  • Proficiency in translating DISA STIGs and CIS Benchmarks into actionable technical requirements for operating systems, databases, and network devices.
  • Advanced experience operating and analyzing data from enterprise scanning tools, specifically Tenable Nessus, SecurityCenter, or ACAS.
  • Experience navigating SIEM platforms and security dashboards to monitor system logs, correlate events, and isolate anomalies.
  • Ability to conduct technical Security Impact Analyses (SIA) to determine how proposed system, hardware, or software changes will affect the overall security baseline.
  • Strong technical background and able to liaison between technical IT personnel and stakeholders.
  • Extensive knowledge of implementing security controls on Windows and Linux systems, both onsite and in a cloud environment (Amazon Web Services (AWS) and Microsoft Azure environments).
  • Excellent communication skills with an ability to translate technical concepts for diverse stakeholders.
  • Well organized, with an attention to detail.
  • Must be able to successfully complete a NOAA (Stennis Space Center)/NASA background investigation for site/system access.
  • Must be able to obtain and maintain facility credentials/authorization.
  • Must be able to obtain and maintain a Public Trust clearance.
  • US Citizenship or a valid Green Card is required for facility credentials/authorization at this work location.

  Benefits

  • Comprehensive healthcare for the employee at no monthly cost