Cybersecurity Analyst

About This Role

The Cybersecurity Analyst supports daily operations with strong experience in the NIST Risk Management Framework (RMF) to also support the security authorization, compliance, and continuous monitoring of federal information systems. This role provides technical guidance to management, system owners, and engineering teams on cybersecurity risk, control implementation, and authorization activities. The analyst will develop and maintain RMF documentation, conduct risk and vulnerability assessments, support security control assessments, and help systems obtain and maintain an Authority to Operate (ATO).

Responsibilities

• Lead RMF life-cycle activities, including system categorization, control selection and validation, assessments, authorization, and continuous monitoring
• Develop and maintain RMF documentation, including SSPs, SAPs/SARs, POA&Ms, risk assessments, PIAs, and continuous monitoring artifacts
• Conduct risk assessments, control gap analyses, and vulnerability reviews; evaluate impact and recommend risk-based remediation
• Coordinate with system owners, network engineers, and administrators to implement and document NIST SP 800-53 controls and support daily operations
• Support the ATO process by preparing authorization packages, tracking findings, coordinating assessor requests, and briefing stakeholders on residual risk and remediation
• Monitor compliance with FISMA, NIST, agency policies, and contractual cybersecurity requirements
• Support internal and external audits through evidence collection, control mapping, interviews, and corrective action tracking
• Analyze vulnerability scans, security tool outputs, and operational data to identify trends, validate control effectiveness, and support continuous diagnostics and mitigation
• Provide cybersecurity guidance and training to system owners, administrators, and users on requirements, secure practices, and documentation
• Develop cybersecurity policies, procedures, standards, and governance processes to strengthen compliance and risk management

Requirements

• Bachelor

’s degree in IT, Computer Science, or a related field preferred; equivalent combination of education, certifications, and relevant experience will be considered

• Active Top Secret Clearance with ability to obtain a SCI
• 3–5 years of Cybersecurity experience supporting RMF, compliance, assessments, or ISSO functions in federal or regulated environments
• Knowledge of NIST SP 800-37/53, FISMA, FIPS 199/200, and related federal guidance
• Knowledge of DISA CCIs and NIST SP 800-53 mapping
• Experience maintaining RMF documentation, authorization packages, and continuous monitoring
• Ability to assess risk, interpret scans, prioritize remediation, and communicate technical risk