Cybersecurity Analyst (Cloud)

Dark Wolf; Herndon (VA); Ibrido; USD 100.000 - 150.000; Tempo pieno

Descrizione del lavoro

Dark Wolf is seeking a Cloud Cybersecurity Analyst to join a collaborative team to design, defend, and continuously evaluate the enterprise security architecture and government accreditation posture for critical IT networks in the Washington DC Metro area on a hybrid schedule.

You will perform vulnerability management, threat modeling, incident response, and audit monitoring, using Nessus, SCAP, and App Detective, with a focus on RMF and NIST guidance; US Citizenship and a Secret clearance are

Competenze

• Bachelor’s degree in computer science or related field.
• 2–5+ years of relevant cyber experience.
• Experience with RMF, CNSSI 1253, and NIST 800-53.
• Ability to explain technical concepts clearly in writing and speech.
• Experience with vulnerability assessment tools such as Nessus SCAP App Detective.

Mansioni

• Identify, analyze, and track vulnerabilities in networks, systems, and applications.
• Support threat modeling exercises and assist in evaluating security incidents.
• Assist in validating security requirements and risk baselines.
• Participate in Security Test and Evaluation preparations and post-test analyses.
• Monitor audit logs and track corrective action plans until closure.
• Configure and harden secure operating systems and access controls.

Conoscenze

Threat modeling

Incident response

Vulnerability management

Communication

Regulatory compliance

Security architecture

Formazione

Bachelor’s Degree in Computer Science or related field

Strumenti

Nessus

SCAP

App Detective

Descrizione del lavoro

Responsibilities

Dark Wolf is seeking Cloud Cybersecurity Analyst to join a collaborative team to design, defend, and continuously evaluate the enterprise security architecture and government accreditation posture for critical IT networks through active threat modeling, incident response, continuous audit monitoring, vulnerability remediation, and strict regulatory compliance This position will be based out of the Washington DC Metro area with hybrid schedule opportunity. Job responsibilities include but are not limited to:

• Utilizing COTS/GOTS and enterprise scanning tools to identify, analyze, and track network, system, and application-level vulnerabilities
• Coordinating with IT teams to support the containment, mitigation, and remediation of identified vulnerabilities and intrusions
• Supporting threat modeling exercises and assisting senior staff in evaluating security incidents to prevent future occurrences
• Assisting in validating established security requirements, assessing operational risks, and recommending baseline safeguards
• Participating in formal Security Test and Evaluation (ST&E) preparations, assist during testing, and aid in drafting post-test analysis reports
• Periodically reviewing system audit logs, tracking open findings, and monitoring corrective action plans until all issues are resolved
• Assisting in configuring, hardening, and maintaining secure operating systems, network access controls, and security applications

Required Qualifications

• Bachelor’s Degree in Computer Science or related field
• 2-5+ years of relevant Cyber experience
• Experience as a Cyber Analyst, RMF Engineer, ISSO, Information Assurance Engineer, Vulnerability Manager, POA&M Manager
• Hands‑on Tool experience associated to role
• Experience with NIST 800-53 and CNSSI 1253
• Experience with risk management policies/procedures, to include DODI 8510.01
• Ability to communicate on technical subjects using clear, concise, non‑technical language to include strong written communications, ability to provide written feedback on documents, and ability to prepare briefings
• Experience using vulnerability and compliance assessment tools such as Nessus, SCAP, or App Detective
• At least one (1) of the following cyber security certifications: Security+ CE, SSCP, CAP, CISM, CASP, CISSP, GSEC, GICSP, GSLC, CEH, CDNA, CSSLP
• Experience assessing technical environments and translating implemented security controls into clear NIST SP 800‑53 control narratives and supporting Authorization to Operate (ATO) documentation
• Cloud Platform familiarity with at least one service offering from AWS, Azure, or Google GCP
• US Citizenship and have a Secret security clearance

The salary range for this position is estimated to be between $100,000.00 - $150,000.00, commensurate on experience and technical skillset.

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.

We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.