Cybersecurity Analyst

Role purpose

Responsibilities

• Develop System Security Plans, Contingency Plans, Business Impact Analyses, POA&Ms, SARs, SAPs, and other RMF documentation.
• Review documentation against current system configurations, including hardware, software, data flows, interconnections, ports, protocols, and services.
• Identify risks, recommend and validate mitigations, document residual risks, and report vulnerability and architecture findings in POA&Ms.
• Participate in A&A status meetings, identify stakeholders, facilitate authorization progress, and help estimate effort.
• Help customer program offices interpret and apply mitigation strategies.
• Maintain cybersecurity policies and processes and apply federal guidance to customer needs.
• Develop and execute Security Test Plans, manage continuous monitoring, and communicate system security posture.

Minimum requirements

• Have at least 5 years of experience with cybersecurity policy, procedures, and processes, including RMF, NIST 800-53, and A&A.
• Have experience developing A&A documentation from scratch and conducting assessments across RMF steps 1 through 4.
• Be familiar with NIST publications and controls, defense-in-depth, and information security and assurance principles.
• Meet DoD 8570 IAM Level II; have hands-on A&A experience and experience with Xacta and Greenlight/Roadrunner.
• Hold a Top Secret clearance with polygraph and be able to read, speak, write, and understand English.
• Have strong customer service, organizational, multitasking, and critical-thinking skills and work accurately in a changing environment.

Preferred qualifications

• One or more of Security+, CAP, CISSP, CISM, GSEC, GCIH, or GSLC certifications is preferred.
• A BA/BS degree and strong oral and written communication skills are preferred.
• Ability to communicate technical security requirements to leaders and staff and to work independently and collaboratively.

Work environment

• The description specifies a typical office environment with no unusual hazards and occasional lifting up to 20 pounds.

Compensation

• The stated annual salary range is $130,000 to $160,000.