Cybersecurity Analyst

Maximus; Northern (KY); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Maximus is seeking a Cybersecurity Analyst to support a federal client, focusing on compliance and risk management for mission-critical systems. This onsite role in Annapolis Junction, MD requires a Secret clearance and US citizenship.

The position involves POA&Ms, vulnerability management, risk analysis, and security documentation across federal frameworks. You will collaborate with cross-functional teams to validate controls, deliver compliance reports, and contribute to security awareness

Qualifications

• Active Secret clearance required.
• US Citizens only due to contract requirements.
• 7+ years of experience in security compliance, vulnerability management, or related cybersecurity field.
• 4+ years managing POA&Ms within government contracting environments.
• Experience with federal security frameworks (NIST RMF, FISMA).
• Ability to collaborate with technical teams to address findings and implement compliance solutions.

Responsibilities

• Serve as the primary point of contact for security compliance activities and coordinate with stakeholders.
• Manage and maintain POA&Ms, ensuring timely remediation and alignment with government requirements.
• Support vulnerability management: run scans, review results, track remediation and verify closure.
• Conduct risk assessments, risk analysis, and document risk mitigation strategies.
• Conduct compliance reviews to ensure adherence to federal regulations and frameworks (NIST RMF, 800-53).
• Prepare and maintain security documentation (SSPs, assessment reports, risk analyses).
• Collaborate with technical teams to validate controls and provide compliance guidance.
• Participate in incident response and after-action reviews, documenting lessons learned.

Skills

Communication skills

Security clearance

Education

CISSP/CISM/CAP certifications

Job description

Maximus is seeking a Cybersecurity Analyst to support a federal client in maintaining compliance and strengthening the security posture of mission-critical systems. As part of our dedicated team, the Security Compliance Analyst will ensure adherence to government security requirements, manage Plans of Action and Milestones (POA&Ms), and support ongoing risk and vulnerability management activities vital to safeguarding critical systems and data in defense of our Homeland.

This position is onsite in Annapolis Junction, Maryland, and requires a Secret clearance.

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS033, T3, Band 6

Job-Specific Essential Duties and Responsibilities:

• Serve as the primary point of contact for security compliance activities, collaborating with stakeholders to track and resolve security concerns.
• Manage and maintain POA&Ms, ensuring timely remediation of findings and alignment with government and contract requirements.
• Support vulnerability management efforts, including running security scans and reviewing scan results, tracking remediation activities, and verifying closure of findings.
• Conduct risk management activities including risk assessments, risk analysis, and documentation of risk mitigation strategies.
• Conduct compliance reviews to ensure systems adhere to federal regulations, contract requirements, and applicable frameworks (e.g., NIST 800-53, RMF).
• Assist in preparing and maintaining security documentation, including System Security Plans (SSPs), assessment reports, and risk analyses.
• Collaborate with technical teams across disciplines to validate security controls, provide compliance guidance, and ensure mission success.
• Participate in incident response and after-action reviews, documenting lessons learned and compliance impacts.
• Develop and deliver compliance reports and metrics for leadership, federal stakeholders, and auditors.
• Contribute to security awareness and training initiatives to promote compliance across operational teams.

Job-Specific Minimum Requirements:

• Active Secret clearance required.
• Due to contract requirements, only US Citizens can be considered. Candidates with dual citizenship cannot be considered.
• 7+ years of experience in security compliance, vulnerability management, or related cybersecurity field.
• 4+ years of experience with:
  • Managing and tracking POA&Ms within government contracting environments.
  • Federal security frameworks, policies, and requirements (e.g., FISMA, NIST RMF).
  • Vulnerability management processes and tools.
  • Risk management activities, including conducting risk assessments and risk analysis.
  • Collaboration with technical teams to address findings and implement compliance solutions.
• Strong written and verbal communication skills with the ability to prepare compliance documentation and reports.
• Candidates must reside within a commutable distance for daily onsite work and meet recall/on-call requirements in a 24x7x365 environment.

Preferred Skills and Qualifications:

• Certifications in the security field such as CISSP, CISM, CAP, or similar.
• Experience with federal government contracts, with preference for contracts under Homeland Security.
• Recent DHS experience with security compliance, risk management, or assessment activities.
• Familiarity with security tools including antivirus software, vulnerability scanners, access control, endpoint protection, vulnerability management, PKI certificate management, logging/SEIM, and DLP.

TCS033, T3, Band 6

EEO Statement

Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected characteristics.

Pay Transparency

Maximus compensation is based on various factors including but not limited to job location, a candidate's education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus's total compensation package. Other rewards may include short- and long-term incentives as well as program-specific awards. Additionally, Maximus provides a variety of benefits to employees, including health insurance coverage, life and disability insurance, a retirement savings plan, paid holidays and paid time off. Compensation ranges may differ based on contract value but will be commensurate with job duties and relevant work experience. An applicant's salary history will not be used in determining compensation. Maximus will comply with regulatory minimum wage rates and exempt salary thresholds in all instances.

Accommodations

Maximus provides reasonable accommodations to individuals requiring assistance during any phase of the employment process due to a disability, medical condition, or physical or mental impairment. If you require assistance at any stage of the employment process—including accessing job postings, completing assessments, or participating in interviews,—please contact People Operations at [e-mail].