IT Security Analyst / Assessor
About the job
- At least 5 years of experience conducting security control assessments of all NIST 800-53 controls.
- Knowledge of NIST 800-53 security controls and required documentation.
- Experience conducting security control assessments using a Risk Management Framework approach.
- U.S. citizenship is required.
- Certification in information technology, such as Security+, is required.
- A bachelor's of science degree in a computer or system science discipline from an accredited college or university is required.
- Working experience in federal government contracts is required.
- An active Public Trust clearance, adjudicated within the past 5 years, is required.
- Perform Certification and Accreditation (C&A) and System Assessment and Authorization (SA&A) as part of NIST SP 800-37 Risk Management Framework system and application accreditation.
- Prepare vulnerability scanning test plans, coordinate testing, and conduct scans using Nessus, Foundstone, WebInspect, Hailstorm, and other scanning applications.
- Analyze vulnerability scan results for validation and root cause.
- Provide technical support in vulnerability assessment, risk assessment, network security, product evaluation, and security implementation.
- Design and implement security solutions to protect the confidentiality, integrity, and availability of sensitive information.
- Provide technical evaluations of customer CM and CMI solutions and make security recommendations.
- Participate in the design of information system business impact analyses, system categorization, contingency plans, privacy documents, and other system security documentation to maintain appropriate protection and minimize operational impact to the enterprise.
- Conduct testing and audit log reviews to evaluate the effectiveness of current security measures.
- Familiarity with the Cyber Security Assessment Methodology (CSAM) tool is a plus.
About the company
NXTKey delivers AI as a Service to U.S.-based commercial enterprises and government agencies, providing AI and automation solutions across industries such as manufacturing, healthcare, IT, and government. Its offerings combine machine learning, computer vision, natural language processing, and predictive analytics to automate and optimize operations. The product works by integrating AI capabilities into a company’s existing processes through a client-centric, sector-tailored approach, enabling rapid return on investment and sustainable growth. NXTKey differentiates itself through deep industry expertise and a proven track record of delivering customized solutions as a trusted partner, focusing on practical outcomes rather than generic tech features. The company aims to help organizations unlock AI’s potential to streamline operations, improve decision-making, and achieve measurable business results.
Company Size
1-10
Company Stage
N/A
Total Funding
N/A
Headquarters
Cheyenne, Wyoming
Founded
2013
Get referred to NXTKey
See people who can refer or advise you
Simplify's Take
What believers are saying
- February 2025 marked NXTKey's 10th federal agency client, expanding customer breadth.
- July 2025 MES II award broadened DoD cloud and Microsoft modernization exposure.
- June 2025 SCRIPTS placement opened government-wide supply-chain risk work across civilian agencies.
What critics are saying
- Federal contracting concentrates revenue; one award protest or recompete can slash pipeline quickly.
- NXTKey's public footprint shows awards, not recurring software revenue, limiting valuation durability.
- If DoD, GSA, or Education budgets tighten, NXTKey's growth engine stalls immediately.
What makes NXTKey unique
- NXTKey wins federal vehicles: DoD MES II, GSA SCRIPTS, DoED CPSS.
- Magnus Management Group gives NXTKey subcontractor access to large government-award ecosystems.
- Africa expansion through Wilber Gatwaza adds a non-U.S. business-development lane.
Help us improve and share your feedback! Did you find this helpful?