Senior Cybersecurity Analyst

This is a fully remote position, open to applicants in Virginia.

📋 Description

• Oversee the complete lifecycle of Risk Management Framework (RMF) activities in alignment with NIST Special Publication 800-37

• Create, evaluate, and sustain security authorization documentation, including SSPs, SAPs, SARs, and POA&Ms

• Analyze and review FedRAMP authorization packages and their updates

• Supervise ATO packages within the FedRAMP Secure Repository

• Liaise with system owners, ISSOs, Cloud Service Providers, and security stakeholders regarding major system modifications and ongoing compliance

• Assess and validate the execution of NIST SP 800-53 Rev. 5 security controls, encompassing inherited and agency-implemented controls

• Carry out risk assessments using methodologies in accordance with NIST SP 800-30

• Offer risk analysis and suggestions to Authorizing Officials and senior stakeholders

• Assist in continuous monitoring and persistent authorization activities

• Evaluate vulnerability scans, monitor POA&Ms, and facilitate remediation efforts

• Collaborate with system owners, security teams, program offices, and senior leadership

• Execute other job-related responsibilities as assigned

• Report to the Cybersecurity Oversight and Compliance Lead / Program Manager

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Public Policy, or a related field (or equivalent experience)

• Professional certification(s) such as CISSP, CISM, or CAP

• At least 7 years of progressive experience in cybersecurity, including a minimum of 4 years in federal RMF/A&A support roles

• Proven experience implementing the NIST Risk Management Framework

• Understanding of FISMA

• Familiarity with the Federal Zero Trust Strategy (OMB M-22-09)

• Knowledge of federal cloud security requirements and environments authorized by FedRAMP

• Experience in supporting Moderate and/or High impact systems

• Proficiency with Microsoft 365 office applications

• Capability to effectively engage with technical teams and executive leadership

• Active Public Trust clearance or the ability to obtain one

• Must be a U.S. citizen or legal permanent resident; the posting specifies 'Must be a US Citizen'

• Must successfully complete pre-employment qualifications set by Cherokee Federal

• Ability to work for extended periods while seated at a desk and using a computer

• Preferred: Familiarity with ServiceNow, CSAM, or similar GRC tools

• Preferred: Experience with Atlassian Confluence and JIRA

• Preferred: Involvement in enterprise-level cybersecurity policy initiatives

• Preferred: Knowledge of federal responsible AI guidelines, including Executive Order 13960, OMB M-25-21, and M-25-22

• Preferred: Experience in supporting federal research or grant-management systems

🏝️ Benefits

• Up to a 6% 401(k) company match

• Paid time off

• Medical, dental, and vision insurance

• Prescription drug coverage

• Basic life and AD&D insurance

• Options for supplemental life insurance

• Coverage for short-term and long-term disability

• Paid holidays

• Employee Assistance Program (EAP)

• Options for Flexible Spending Account (FSA) and Health Savings Account (HSA)

• Support for professional development, training, and certification

• Voluntary benefits for accident, critical illness, and identity theft protection