Cybersecurity Analyst

Koitecc Solutions; Virginia, Northern (MN, KY); Hybrid; USD 70,000 - 126,000; Full time

Job summary

Leidos is seeking a detail-oriented Cybersecurity Analyst to support assessment, authorization, and continuous monitoring of information systems under RMF. The role includes leading security accreditation, developing authorization packages, and coordinating with stakeholders to implement controls.

The candidate should have a Bachelor's degree and 3–7 years in cybersecurity, with RMF experience and relevant certifications. A Secret clearance is required.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).
• 3–7 years of experience in cybersecurity, information assurance, or security compliance.
• Experience with NIST RMF and related standards.
• Familiarity with vulnerability tools (Tenable/Nessus/ACAS).
• Ability to obtain a Secret level Security Clearance.

Responsibilities

• Lead and support the security accreditation process for information systems.
• Develop, maintain, and review security authorization packages.
• Conduct security control assessments in accordance with RMF and standards.
• Collaborate with system owners and engineers to implement controls.
• Perform risk assessments and mitigation recommendations.
• Monitor systems for compliance with policies and standards.
• Maintain POA&Ms and track remediation activities.
• Support continuous monitoring and security reporting.
• Prepare documentation for A&A activities.
• Participate in internal and external cybersecurity audits.

Skills

RMF knowledge

NIST standards

Vulnerability tools

Security controls

Communication

Secret clearance

Education

Bachelor's degree

Tools

Tenable

Nessus

ACAS

Job description

Leidos is seeking a detail-oriented Cybersecurity Analyst with expertise in Security Accreditation to support the assessment, authorization, and continuous monitoring of information systems. The successful candidate will ensure systems comply with government and industry cybersecurity requirements while supporting the organization's Risk Management Framework (RMF) processes.

Primary Responsibilities:

• Lead and support the security accreditation process for information systems.
• Develop, maintain, and review security authorization packages.
• Conduct security control assessments in accordance with RMF and applicable security standards.
• Collaborate with system owners, engineers, and stakeholders to implement security controls.
• Perform security risk assessments and recommend mitigation strategies.
• Monitor systems for compliance with cybersecurity policies and standards.
• Maintain Plans of Action and Milestones (POA&Ms) and track remediation activities.
• Support continuous monitoring activities, including vulnerability management and security reporting.
• Prepare documentation for Assessment & Authorization (A&A) activities.
• Participate in internal and external cybersecurity audits.
• Stay current on cybersecurity threats, regulatory requirements, and best practices.

Basic Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience).
• 3-7 years of experience in cybersecurity, information assurance, or security compliance.
• Experience implementing or supporting the NIST Risk Management Framework (RMF).
• Knowledge of:
  • NIST SP 800-37
  • NIST SP 800-53
  • NIST SP 800-171
  • FISMA
  • FedRAMP (preferred)
• Experience with vulnerability assessment tools such as Tenable, Nessus, or ACAS.
• Strong understanding of security controls, risk assessment, and compliance documentation.
• Excellent written and verbal communication skills.
• Excellent communication skills both written and oral.
• At least one of the following Information Security Certifications:
  • CISSP
  • CISM
  • Security+
  • CAP (Certified Authorization Professional)
  • CGRC (Certified in Governance, Risk and Compliance)
  • CEH
• Ability to obtain a Secret level Security Clearance.

Preferred Qualifications:

• Active Secret clearance
• Familiarity with cloud security (AWS, Azure, or Google Cloud).
• Experience supporting continuous monitoring programs
• Risk Management Framework (RMF) knowledge/experience
• Security Accreditation & Authorization (A&A) knowledge/experience
• NIST Cybersecurity Framework knowledge/experience
• Vulnerability Management knowledge/experience
• Security Compliance knowledge/experience
• Risk Assessment knowledge/experience
• Incident Response fundamentals knowledge/experience
• Security Documentation knowledge/experience
• Microsoft Windows & Linux administration knowledge/experience

Remote Interview / Identification Notice

**** Please be advised that during the interview, you will be required to keep your camera on, and your interviewer will be taking your picture for identification purposes if an offer letter is extended to you.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Pay Range:

Pay Range $69,550.00 - $125,725.00

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Securing Your Data

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [e-mail].

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.