Cybersecurity Analyst

Edgewater Federal Solutions; Washington; On-site; USD 190,000 - 200,000; Full time

Benefits offered by this job

Competitive salary

Medical Insurance

Dental Insurance

Vision Insurance

401K / Retirement plan

Tuition and Technical Training Reimbur

Job summary

Edgewater Federal Solutions seeks a Cybersecurity Analyst to lead RMF lifecycle activities and drive compliance for federal information systems. You will prepare authorization packages, document controls, and guide system owners through risk-based remediation.

The role demands an active Top Secret clearance with SCI eligibility and 3–5 years in RMF, NIST, FISMA, and continuous monitoring. Onsite in Washington, DC with a strong emphasis on writing and collaboration.

Qualifications

• Active Top Secret clearance with ability to obtain SCI.
• 3–5 years of cybersecurity RMF, compliance, assessments, or ISSO functions in federal or regulated environments.
• Knowledge of NIST SPs 800-37/53, FISMA, FIPS 199/200 and related federal guidance.
• Experience maintaining RMF documentation and continuous monitoring artifacts.
• Strong technical writing and ability to translate requirements into actions.

Responsibilities

• Lead RMF lifecycle activities including categorization, control selection, assessments, authorization, and continuous monitoring.
• Develop RMF documentation: SSPs, SAPs/SARs, POA&Ms, risk assessments, PIAs, CAM artifacts.
• Conduct risk and vulnerability assessments; evaluate impact and remediation.
• Coordinate with owners and engineers to implement NIST SP 800-53 controls.
• Support ATO by preparing packages, tracking findings, briefing on residual risk.

Skills

RMF lifecycle

Risk assessments

Vulnerability assessments

Authorization & continuous monitoring

Technical writing

NIST SP 800-53 mapping

Communicate risk to stakeholders

Education

Bachelor's degree in IT/CS or related field

Tools

eMASS

SIEM

FISMA/NIST guidance knowledge

Job description

Overview

The Cybersecurity Analyst supports day-to-day operations with strong experience in the NIST Risk Management Framework (RMF) to also support the security authorization, compliance, and continuous monitoring of federal information systems. This role provides technical guidance to management, system owners, and engineering teams on cybersecurity risk, control implementation, and authorization activities. In this position, the Cybersecurity Analyst will develop and maintain RMF documentation, conduct risk and vulnerability assessments, support security control assessments, and help systems obtain and maintain an Authority to Operate (ATO). The position requires knowledge of FISMA, NIST publications, federal cybersecurity policies, and agency-specific guidance, along with sound judgment, strong technical writing, and the ability to translate requirements into actionable security practices.

Work Location: Washington, DC

Work Arrangement: Onsite

Clearance: Must have an active Top Secret clearance and able to obtain a SCI

Responsibilities

• Lead RMF life-cycle activities, including system categorization, control selection and validation, assessments, authorization, and continuous monitoring.


• Develop and maintain RMF documentation, including SSPs, SAPs/SARs, POA&Ms, risk assessments, PIAs, and continuous monitoring artifacts.


• Conduct risk assessments, control gap analyses, and vulnerability reviews; evaluate impact and recommend risk-based remediation.


• Coordinate with system owners, network engineers, and administrators to implement and document NIST SP 800-53 controls and support daily operations.


• Support the ATO process by preparing authorization packages, tracking findings, coordinating assessor requests, and briefing stakeholders on residual risk and remediation.


• Monitor compliance with FISMA, NIST, agency policies, and contractual cybersecurity requirements.


• Support internal and external audits through evidence collection, control mapping, interviews, and corrective action tracking.


• Analyze vulnerability scans, security tool outputs, and operational data to identify trends, validate control effectiveness, and support continuous diagnostics and mitigation.


• Provide cybersecurity guidance and training to system owners, administrators, and users on requirements, secure practices, and documentation.


• Develop cybersecurity policies, procedures, standards, and governance processes to strengthen compliance and risk management.

Qualifications

• Bachelor's degree in IT, Computer Science, or a related field preferred; equivalent combination of education, certifications, and relevant experience will be considered.


• Active Top Secret Clearance with ability to obtain a SCI.


• 3-5 years of Cybersecurity experience supporting RMF, compliance, assessments, or ISSO functions in federal or regulated environments.


• Knowledge of NIST SP 800-37/53, FISMA, FIPS 199/200, and related federal guidance.


• Knowledge of DISA CCIs and NIST SP 800-53 mapping.


• Experience maintaining RMF documentation, authorization packages, and continuous monitoring.


• Ability to assess risk, interpret scans, prioritize remediation, and communicate technical risk.


• Familiarity with vulnerability management, SIEM, endpoint security, CDM, and eMASS or similar platforms preferred.


• Strong technical writing, documentation, presentation, audit, and executive reporting skills.


• Ability to work independently, prioritize tasks, and collaborate across teams.

Preferred Qualifications (must have at least 2)

• CompTIA Security+ CE


• ISC2 CGRC


• CompTIA CySA+


• CISSP or CISM


• DoD Manual 8140.3


• IAT Level II

Benefits

• Competitive salary: $190,000 -200,000


• Paid Time Off & Holiday Pay


• Medical Insurance


• Dental Insurance


• Vision Insurance


• Disability, Life Insurance, and AD&D


• Flexible Spending Accounts


• Pre-Tax 401K and/or After-Tax Roth IRA (with employer matching contribution)


• Tuition and Technical Training Reimbursement


• Exercise Reimbursement


• Employee Assistance Program


• Collaborative and dynamic work environment

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

• While performing the duties of this job, the employee may be regularly required to stand, sit, talk, hear, reach, stoop, kneel, and use hands and fingers to operate a computer, telephone, keyboard, and standard office equipment.


• Specific vision abilities required by this job include close vision requirements due to computer work.


• The employee must occasionally lift and/or move up to fifteen (15) pounds.


• Fine hand manipulation (keyboarding).

Working at Edgewater Federal Solutions

Edgewater Federal Solutions is a privately held government contracting firm located in Frederick, MD. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services, and timely delivery. Edgewater Federal Solutions is ISO 9001, 20000-1, 270001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named in the Top Workplaces in the Greater Washington Area Companies since 2018.

Edgewater Federal Solutions is an Equal Opportunity Employer. It has been and continues to be our policy to provide equal employment to all employees and applicants for employment without regard to race, color, religion, gender, national origin, age, disability, marital status, veteran status and/or other status protected by applicable law. #LI-HH1