Insitu has an immediate 12-month contract for an experienced Information Security Analyst specializing in Risk Management to join our Information Security team. As a key member of our enterprise security function, you will protect Insitu’s systems, applications, and personnel, supporting our mission to deliver world-class solutions in aviation and UAS technology. Your work will help ensure our infrastructure and services meet the highest security standards, maintain customer trust, and support organizational compliance. You will champion secure design, lead risk management initiatives, and collaborate across the business to solve complex security challenges.

What you’ll do:

• Plan, implement, and upgrade network and information security controls in accordance with industry standards.
• Identify security needs and develop strategies to safeguard sensitive information.
• Coordinate and maintain the implementation of security architecture and applications; ensure ongoing infrastructure maintenance.
• Conduct compliance monitoring, identify organizational deficiencies, and recommend/implement necessary corrective measures.
• Perform risk assessments, security evaluations, and rigorous testing of systems and equipment.
• Develop, deploy, and manage firewalls and other security technologies; establish effective safeguard procedures.
• Analyze system logs, configure alerts, and exploit security controls to detect threats and anomalies.
• Execute penetration testing and vulnerability assessments to determine system risk levels.
• Create, implement, and track mitigation plans for identified vulnerabilities.
• Provide active threat monitoring, evaluate indicators of compromise, and respond to security incidents.
• Research, develop, and refine incident response tools and processes; participate in breach investigations and remediation.
• Develop and deliver security awareness training for staff, both ad hoc and as required.
• Ensure the maintenance and refinement of Insitu’s System Security Plan to comply with NIST 800-171 standards.
• Develop and update governance documentation, including policies, standards, and work instructions.
• Liaise with senior stakeholders, offering security guidance to managers, directors, and executives.

Education & Experience:

• Bachelor’s degree in a technical field (e.g., Information Technology, Computer Science, Cybersecurity) and at least 5 years of relevant Information Security experience, or a master’s degree with at least 3 years.
• Strong knowledge of information security principles, including governance, risk, and compliance practices.
• Familiarity with information protection regulations (e.g., NIST 800-171, DFARS, HIPAA, PCI-DSS) and applicable laws.
• Experience setting up, configuring, and managing firewalls and security safeguard systems.
• Demonstrated experience in penetration testing, vulnerability assessment, and threat monitoring.
• Strong verbal and written communication skills for technical and non-technical audiences.
• Proven ability to independently research and resolve complex technical security issues.
• High degree of integrity and professionalism.
• Effective collaboration, teaming, and adaptability within a fast-paced, dynamic environment.

Preferred Education & Experience:

• Bachelor’s or master’s degree in Cybersecurity, Information Assurance, or related field.
• Professional Information Security certifications such as CISSP, CISM, or CEH
• Experience in highly regulated industries such as defense, aerospace, or government.
• Experience with cloud security frameworks and technologies
• In-depth understanding and practical experience with NIST, ISO/IEC 27001, or similar security frameworks.
• Familiarity with security incident response platforms

In-Office Requirement Statement: (Remote) We let the type of work you do determine the collaboration style. That means we're not always working in an office, but we continue to gather for key moments of collaboration and connection.

• This role will need to be in the office for in-person collaboration 2-3 times per year and therefore can be located anywhere within the continental United States. For candidates local to the area there will be a hybrid onsite requirement based on your location.