Cloud Cybersecurity Analyst—RMF/ATO/ST&E (Hybrid DC)

BuddoBot Inc.; Herndon (VA); Hybrid; USD 100,000 - 150,000; Full time

Job summary

Dark Wolf in the Washington DC metro area seeks a Cloud Cybersecurity Analyst to design, defend, and evaluate enterprise security posture. The role involves threat modeling, incident response, continuous audit monitoring, vulnerability remediation, and compliance with government standards.

The position requires US citizenship with a Secret clearance and a hybrid schedule, based in the DC area with selective on-site days.

Qualifications

• Bachelor's degree in computer science or related field.
• 2–5+ years of cyber experience.
• Experience as Cyber Analyst, RMF Engineer, ISSO, or similar.
• Experience with NIST 800-53 and CNSSI 1253.
• Experience with risk management policies incl. DODI 8510.01.
• Clear written and briefing communication on technical topics.
• Experience with vulnerability and compliance tools.

Responsibilities

• Utilizing scanning tools to identify vulnerabilities in network, system, and apps.
• Coordinate with IT teams to contain and remediate vulnerabilities and intrusions.
• Support threat modeling and evaluate security incidents to prevent repeats.
• Assist in validating security requirements and risk assessments.
• Participate in ST&E prep, testing, and post-test analysis reports.
• Review audit logs, track findings, and monitor corrective actions.
• Configure, harden, and maintain secure OS, access controls, and security apps.

Education

Bachelor's Degree in Computer Science or related field

Tools

Nessus

SCAP

App Detective

Job description

Dark Wolf in the Washington DC metro area seeks a Cloud Cybersecurity Analyst to design, defend, and evaluate enterprise security posture. The role involves threat modeling, incident response, continuous audit monitoring, vulnerability remediation, and compliance with government standards.

The position requires US citizenship with a Secret clearance and a hybrid schedule, based in the DC area with selective on-site days.