Cybersecurity Analyst (Cloud)Herndon, Virginia

BuddoBot Inc.; Herndon (VA); Hybrid; USD 100,000 - 150,000; Full time

Job summary

Dark Wolf is seeking a Cloud Cybersecurity Analyst to design, defend, and continuously evaluate secure IT networks for a government accreditation posture. The role is based in the Washington DC Metro area with a hybrid schedule opportunity and requires US citizenship with a Secret clearance.

Key duties include vulnerability identification, remediation coordination, threat modeling support, and ST&E preparations.

Qualifications

• Bachelor's Degree in Computer Science or related field.
• 2-5+ years of relevant Cyber experience.
• Experience as a Cyber Analyst, RMF Engineer, ISSO, Information Assurance Engineer, Vulnerability Manager, POA&M Manager.
• Hands-on tool experience with vulnerability and compliance assessment tools.

Responsibilities

• Utilize scanning tools to identify vulnerabilities in network, system, and applications.
• Coordinate with IT teams to contain, mitigate, and remediate vulnerabilities and intrusions.
• Support threat modeling exercises and assist in evaluating security incidents.
• Validate security requirements, assess operational risks, and recommend safeguards.
• Assist in Security Test & Evaluation (ST&E) preparations and post-test analysis reports.
• Review system audit logs, track findings, and monitor corrective action plans.
• Configure, harden, and maintain secure OS, network access controls, and security applications.

Skills

Threat modeling

Incident response

Vulnerability assessment

NIST SP 800-53

CNSSI 1253

Clear communication

Cloud platforms

Education

Bachelor's degree in CS or related field

Tools

Nessus

SCAP

App Detective

Job description

Dark Wolf is seeking Cloud Cybersecurity Analyst to join a collaborative team to design, defend, and continuously evaluate the enterprise security architecture and government accreditation posture for critical IT networks through active threat modeling, incident response, continuous audit monitoring, vulnerability remediation, and strict regulatory compliance This position will be based out of the Washington DC Metro area with hybrid schedule opportunity. Job responsibilities include but are not limited to:

• Utilizing COTS/GOTS and enterprise scanning tools to identify, analyze, and track network, system, and application-level vulnerabilities
• Coordinating with IT teams to support the containment, mitigation, and remediation of identified vulnerabilities and intrusions
• Supporting threat modeling exercises and assisting senior staff in evaluating security incidents to prevent future occurrences
• Assisting in validating established security requirements, assessing operational risks, and recommending baseline safeguards
• Participating in formal Security Test and Evaluation (ST&E) preparations, assist during testing, and aid in drafting post-test analysis reports
• Periodically reviewing system audit logs, tracking open findings, and monitoring corrective action plans until all issues are resolved
• Assisting in configuring, hardening, and maintaining secure operating systems, network access controls, and security applications

Required Qualifications:

• Bachelor's Degree in Computer Science or related field
• 2-5+ years of relevant Cyber experience
• Experience as a Cyber Analyst, RMF Engineer, ISSO, Information Assurance Engineer, Vulnerability Manager, POA&M Manager
• Hands-on Tool experience associated to role
• Experience with NIST 800-53 and CNSSI 1253
• Experience with risk management policies/procedures, to include DODI 8510.01
• Ability to communicate on technical subjects using clear, concise, non-technical language to include strong written communications, ability to provide written feedback on documents, and ability to prepare briefings
• Experience using vulnerability and compliance assessment tools such as Nessus, SCAP, or App Detective
• At least one (1) of the following cyber security certifications: Security+ CE, SSCP, CAP, CISM, CASP, CISSP, GSEC, GICSP, GSLC, CEH, CDNA, CSSLP
• Experience assessing technical environments and translating implemented security controls into clear NIST SP 800-53 control narratives and supporting Authorization to Operate (ATO) documentation
• Cloud Platform familiarity with at least one service offering from AWS, Azure, or Google GCP
• US Citizenship and have a Secret security clearance

The salary range for this position is estimated to be between $100,000.00 - $150,000.00, commensurate on experience and technical skillset.

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.

We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.