Cyber Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as the VES System Steward within VA's ServiceNow Continuous Authorization and Monitoring (CAM) platform.

• Create, manage, and coordinate ATO authorization packages, encompassing security controls, implementation statements, and supporting evidence.

• Assist in security authorization and continuous monitoring efforts in compliance with FISMA, NIST SP 800-53 Rev. 5, and VA policies.

• Update and maintain security documentation, including the System Security Plan (SSP), Configuration Management Plan (CMP), Privacy Threshold Analysis (PTA), Privacy Impact Assessment (PIA), and other necessary artifacts.

• Coordinate vulnerability assessments, penetration testing, security control evaluations, and remediation activities.

• Develop, manage, and track Plans of Action and Milestones (POA&Ms), including remediation timelines and closure documentation.

• Collaborate with System Owners, ISSOs, Privacy Officers, technical teams, and VA cybersecurity stakeholders.

• Maintain documentation for system authorization boundaries, including minor applications, system interconnections, and security impact analyses.

• Monitor security risks, authorization milestones, and compliance activities, providing regular status updates to program leadership.

• Assist with security audits, assessments, and ongoing authorization activities to uphold the VES security posture.

⛳️ Requirements

• Must be a U.S. Citizen or Permanent Resident (Required).

• Bachelor's Degree; relevant experience may be considered in lieu of a degree.

• Experience supporting federal cybersecurity programs, ideally within the Department of Veterans Affairs.

• In-depth knowledge of FISMA, NIST RMF, NIST SP 800-53 Rev. 5, and federal security authorization processes.

• Familiarity with ServiceNow CAM, eMASS, or comparable Governance, Risk, and Compliance (GRC) tools.

• Experience in developing ATO packages, managing POA&Ms, and coordinating continuous monitoring activities.

• Understanding of vulnerability management, security assessments, and federal privacy regulations.

• Strong analytical, technical writing, communication, and stakeholder coordination abilities.

• Minimum of 3 years of experience as a System Steward, ISSO, Cybersecurity Engineer, or RMF Specialist.

• Familiarity with VA cybersecurity policies, procedures, and authorization requirements.

• Relevant certifications such as CISSP, CISM, CGRC, CISA, or CompTIA Security+.

• Standard business hours are Monday through Friday.

• Occasional extended or weekend hours may be necessary.

• Must have reliable internet service for effective telecommuting.

• Must be authorized to work in the U.S.; the employer participates in E-Verify.

🏝️ Benefits

• Medical, Dental, and Vision coverage.

• Health Savings Account with company contribution when enrolled in an eligible plan.

• Company-paid Life, Accidental Death, Short-term & Long-term Disability insurance.

• Voluntary Accident, Hospital Indemnity, & Critical Care Insurance options.

• Voluntary Medical & Dependent Care Flexible Spending Accounts.

• Accrued Paid Time Off.

• Company Paid Holidays.

• 401(k) Retirement Plan with Company match.

• Remote work/telecommuting opportunities.

• Company-provided reasonable accommodation for qualified individuals with disabilities.