Cyber Security Analyst

Sprezzatura; United States; Remote; USD 90,000 - 100,000; Full time

Benefits offered by this job

Medical, Dental, and Vision

HSA with Company contribution

Life and Disability insurance

Voluntary insurance: Accident, Hosp. &

Flexible Spending Accounts

Paid time off & Holidays

401(k) with company match

Job summary

Sprezzatura is seeking a Cyber Security Analyst to join our team supporting the Veterans Health Administration Enrollment System (VES). The role focuses on maintaining ATO, RMF, and VA cybersecurity requirements, and coordinating continuous monitoring activities. You will develop, maintain, and track security artifacts and work with VA stakeholders to uphold the security posture.

U.S. citizenship or permanent resident status is required; the position is remote in the U.S.

Qualifications

• Bachelor Degree required or experience considered in lieu of degree.
• Experience in federal cybersecurity programs preferred (VA experience).
• Strong knowledge of FISMA, NIST RMF, SP 800-53 Rev.5.
• Experience with ServiceNow CAM, eMASS, or similar GRC tools.
• Experience developing ATO packages and POA&Ms.
• Familiarity with vulnerability management and privacy requirements.
• Strong written and verbal communication and stakeholder coordination.
• 3+ years in roles like RMF Specialist, ISSO, or Cybersecurity Engineer.
• VA cybersecurity policies familiarity.
• Certifications: CISSP, CISM, CGRC, CISA, or CompTIA Security+.

Responsibilities

• Serve as VES System Steward within VA CAM platform.
• Develop, maintain, and coordinate ATO authorization packages, including security controls, implementation statements, and supporting evidence.
• Support security authorization and continuous monitoring activities in accordance with FISMA, NIST SP 800-53 Rev. 5, and VA policies.
• Maintain and update security documentation, including SSP, CMP, PTA, PIA, and other artifacts.
• Coordinate vulnerability assessments, penetration testing, security control assessments, and remediation activities.
• Develop, maintain, and track POA&Ms, including remediation schedules and closure evidence.
• Coordinate with System Owners, ISSOs, Privacy Officers, technical teams, and VA cybersecurity stakeholders.
• Maintain system authorization boundary documentation, including minor applications and interconnections.
• Monitor security risks, authorization milestones, and compliance activities; report to leadership.
• Support security audits, assessments, and ongoing authorization activities to maintain VES posture.

Skills

Analytical skills

Technical writing

Communication

Stakeholder coordination

Cybersecurity knowledge

Education

Bachelor Degree or equivalent experience

Tools

ServiceNow CAM

eMASS

GRC tools

Job description

Location: Remote (In the U.S)

Position Title: Cyber Security Analyst

Other Considerations

U.S. Citizen or Permanent Resident (Required)

Position Summary

Sprezzatura is seeking a Cyber Security Analyst to join our team supporting (Veterans Health Administration (VHA) Enrollment System (VES). In this role you will be responsible for supporting the system's Authority to Operate (ATO), maintaining security authorization documentation, coordinating continuous monitoring activities, and ensuring compliance with FISMA, NIST Risk Management Framework (RMF), and VA cybersecurity requirements. This is an excellent opportunity for someone who is passionate about cybersecurity and helping our veterans.

Responsibilities

• Serve as the VES System Steward within VA's ServiceNow Continuous Authorization and Monitoring (CAM) platform
• Develop, maintain, and coordinate ATO authorization packages, including security controls, implementation statements, and supporting evidence
• Support security authorization and continuous monitoring activities in accordance with FISMA, NIST SP 800-53 Rev. 5, and VA policies
• Maintain and update security documentation, including the System Security Plan (SSP), Configuration Management Plan (CMP), Privacy Threshold Analysis (PTA), Privacy Impact Assessment (PIA), and other required artifacts
• Coordinate vulnerability assessments, penetration testing, security control assessments, and remediation activities
• Develop, maintain, and track Plans of Action and Milestones (POA&Ms), including remediation schedules and closure evidence
• Coordinate with System Owners, ISSOs, Privacy Officers, technical teams, and VA cybersecurity stakeholders to address security and compliance requirements
• Maintain system authorization boundary documentation, including minor applications, system interconnections, and security impact analyses
• Monitor security risks, authorization milestones, and compliance activities, providing regular status reports to program leadership
• Support security audits, assessments, and ongoing authorization activities to maintain the VES security posture.

Qualifications

• Bachelor Degree and experience will be considered in lieu of the degree
• Experience supporting federal cybersecurity programs, preferably within the Department of Veterans Affairs
• Strong knowledge of FISMA, NIST RMF, NIST SP 800-53 Rev. 5, and federal security authorization processes
• Experience with ServiceNow CAM, eMASS, or similar Governance, Risk, and Compliance (GRC) tools
• Experience developing ATO packages, managing POA&Ms, and coordinating continuous monitoring activities
• Familiarity with vulnerability management, security assessments, and federal privacy requirements
• Strong analytical, technical writing, communication, and stakeholder coordination skills
• Experience serving as a System Steward, ISSO, Cybersecurity Engineer, or RMF Specialist for at least 3 years
• Familiarity with VA cybersecurity policies, procedures, and authorization requirements
• Relevant certifications such as CISSP, CISM, CGRC, CISA, or CompTIA Security+

WORKING CONDITIONS

Standard Business hours are Monday through Friday. Occasional extended or weekend hours may be required based on operational needs. Must have reliable internet service that allows for effective telecommuting.

PAY RANGE

The base salary range for this position is $90,000 to $100,000 annually, depending on geographic work location, relevant experience, skills, education, internal equity, security clearance, and contract requirements. Geographic salary ranges are determined in accordance with the company's compensation practices and represent a good-faith estimate of the compensation for this position at the time of posting.

Benefits

Sprezzatura offers a comprehensive and flexible benefit package to include:

• Medical, Dental, and Vision
• Health Saving Account (when enrolled in eligible plan) with Company contribution
• Company paid Life, Accidental Death, Short-term & Long-term Disability
• Voluntary Accident, Hospital Indemnity, & Critical Care Insurance
• Voluntary Medical & Dependent Care Flexible Spending Accounts
• Accrued Paid Time Off & Company Paid Holidays
• 401(k) Retirement Plan with Company match

WORK AUTHORIZATION

Sprezzatura participates in E-Verify and will provide the federal government with your I-9 information to confirm that you are authorized to work in the U.S.

Sprezzatura is a mission-driven, Service-Disabled Veteran-Owned Small Business (SDVOSB) that thrives at the intersection of technology, innovation, and impact. We specialize in secure, scalable, and human-centered digital solutions that accelerate government transformation. Our work spans DevSecOps, health IT modernization, intelligent automation, benefits delivery, and digital communications. We partner with agencies ready to evolve—delivering not just strategy, but measurable execution. Rooted in operational excellence and driven by curiosity, we help our clients navigate complexity with clarity, turning ambitious ideas into real-world outcomes. No buzzwords. Just impact.

EEO STATEMENT

Sprezzatura is an Equal Opportunity Employer. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, genetic information, protected veteran status, or any other legally protected characteristic. Applicants have the right to discuss, disclose, or inquire about compensation without retaliation. Reasonable accommodation is available for qualified individuals with disabilities.

This job description is not intended to be an employment contract and does not guarantee employment for any specific duration.