Cybersecurity Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee and manage the entire Department of Defense (DoD) Authority to Operate (ATO) procedure.

• Act as the main cybersecurity point of contact among project stakeholders, government cybersecurity representatives, and the Information System Security Officer (ISSO).

• Create, sustain, and manage Risk Management Framework (RMF) artifacts and documentation, such as System Security Plans, Plans of Action & Milestones, Security Assessment Reports, and Security Control Traceability Matrices.

• Guide the implementation and upkeep of DoD RMF controls and security stipulations.

• Spearhead vulnerability management initiatives, encompassing security scanning, risk evaluation, remediation planning, and ongoing monitoring.

• Supervise and manage Security Technical Implementation Guide (STIG) application and compliance efforts.

• Organize cybersecurity evaluations, audits, and authorization reviews.

• Ensure adherence to DoD cybersecurity regulations, FedRAMP criteria, and standards outlined in the DoD Cloud Computing Security Requirements Guide.

• Assist in accreditation processes for Impact Level (IL) 4 and IL5 cloud settings.

• Offer cybersecurity subject matter expertise to program leadership and technical teams.

• Track cybersecurity risks and suggest mitigation strategies to uphold system authorization status.

⛳️ Requirements

• A Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or a related technical discipline.

• At least eight (8) years of consistent experience in Cybersecurity or Information Assurance.

• Minimum of five (5) years of practical experience overseeing the DoD Risk Management Framework (RMF) process for a significant information system.

• Proven track record of leading at least one information system through the complete Authority to Operate (ATO) process on a DoD network.

• Familiarity with FedRAMP and DoD Cloud Computing Security Requirements Guide (SRG) stipulations for IL4 and IL5 environments.

• In-depth knowledge of DoD cybersecurity policies and protocols.

• Strong understanding of RMF implementation and ongoing monitoring.

• Comprehensive knowledge of vulnerability management.

• Thorough understanding of security control assessments.

• Solid familiarity with STIG compliance and remediation processes.

• U.S. Citizenship is mandatory.

• Must fulfill eligibility criteria for access to classified information and be capable of obtaining a government-issued security clearance.

• Candidates may undergo a background investigation, including reviews of criminal history, employment and educational verification, drug screening, and creditworthiness assessment.

🏝️ Benefits

• Competitive salary and comprehensive benefits package.

• Opportunities for professional development and career advancement.

• Collaborative and dynamic work environment.