Cybersecurity Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Update and manage RMF documentation, which includes SSPs, POA&Ms, SARs, RARs, and associated artifacts.

• Perform security control assessments and assist in the validation of both technical and procedural control implementations.

• Facilitate continuous monitoring through the collection of evidence, log reviews, and tracking vulnerabilities.

• Aid in audits, assessments, and compliance reviews by preparing necessary documentation and evidence packages.

• Monitor POA&M items, remediation efforts, and corrective action plans.

• Assist with vulnerability scanning, configuration reviews, and security validation activities.

• Record assessment outcomes, risks, findings, and recommendations.

• Collaborate with cybersecurity engineers to confirm remediation actions and maintain accurate documentation.

• Create cybersecurity dashboards, compliance summaries, and updates on control statuses.

• Keep cybersecurity records, configuration documentation, and assessment tracking logs up to date.

• Engage in security meetings, assessment discussions, and technical coordination sessions.

• Support ISSO and ISSM personnel in fulfilling ATO and sustainment obligations.

• Work closely with ISSOs, engineers, and mission stakeholders to ensure cybersecurity records are precise, comprehensive, and in line with RMF, NIST, and DoD standards.

⛳️ Requirements

• Must possess an active Top Secret clearance, backed by a Tier 5 background investigation.

• Bachelor's degree in Information Technology, Cybersecurity, Information Assurance, or a related discipline.

• At least 5 years of experience in cybersecurity, RMF support, compliance, or information assurance.

• Proven experience in updating SSPs, POA&Ms, SARs, and other cybersecurity-related documentation.

• Experience in conducting or supporting security control assessments.

• Background in preparing audit evidence, compliance documents, or security reporting.

• Experience in supporting continuous monitoring tasks or vulnerability management processes.

• Familiarity with NIST SP 800-53, RMF methodologies, and DoD cybersecurity regulations.

• Knowledge of STIGs, patching requirements, and secure configuration baselines.

• Understanding of vulnerability scanning, assessment workflows, and security testing methodologies.

• Ability to document assessment findings, remediation measures, and compliance artifacts clearly and accurately.

• Security+ certification is required.

• Strong writing and documentation abilities.

• Excellent analytical and problem-solving skills.

• Outstanding organizational capabilities.

• Proven ability to collaborate effectively with cybersecurity teams, engineers, and PMO personnel.

• High attention to detail and a strong commitment to accuracy and compliance.

• Experience with eMASS or other compliance tracking systems is preferred.

• Familiarity with cloud security controls and cloud-based compliance requirements is preferred.

• Understanding of Zero Trust principles and strategies for cybersecurity modernization is preferred.

• CAP, CASP+, CISSP, and other compliance or assessment-focused certifications are preferred.

🏝️ Benefits

• Regular full-time employment.

• Equal Employment Opportunity and Affirmative Action employer.

• Authorization to share your resume and personal information with subsidiaries, affiliates, and teaming partners for consideration for this and similar positions.