Cybersecurity Analyst V (Senior)

People Technology And Processes; Washington (District of Columbia); On-site; USD 127,000 - 138,000; Full time

Job summary

People Technology And Processes is seeking a Cybersecurity Analyst V (Senior) in Washington D.C. This full-time position entails leading RMF lifecycle execution, overseeing vulnerability management, and helping to compile Security Authorization Packages. A Bachelor’s degree in a relevant field and at least 10 years of experience in IT, along with an active Secret clearance, are required for this role. Additionally, proficiency in cybersecurity best practices is essential.

The ideal candidate will engage with stakeholders and ensure compliance with DoD/DON directives, contributing to significant improvements in cybersecurity risk management.

Qualifications

• At least 10 years of experience in IT functions such as network administration, engineering, or cybersecurity.
• Proficient in managing end-to-end Risk Management Framework (RMF) activities.
• Currently possess an active Secret clearance with the ability to obtain a Top Secret.

Responsibilities

• Lead RMF lifecycle execution and maintain RMF artifacts.
• Compile and submit Security Authorization Packages for ATO decisions.
• Conduct security control assessments aligned to DoD/DON guidelines.

Skills

Risk Management Framework (RMF)

Cybersecurity Best Practices

Vulnerability Management

IT Functions Experience

Stakeholder Engagement

Education

Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, or related field

Job description

Job Location: Washington D.C., DC 20376. Position Type: Full Time. Salary Range: $127,000.00 - $138,000.00. Title: Cybersecurity Analyst V (Senior). Clearance Type: Secret with the ability to obtain a Top Secret.

Responsibilities

• Lead RMF lifecycle execution: Develop, manage, and maintain RMF artifacts (system categorization, control selection/implementation, assessment, authorization, and continuous monitoring) to meet DoD/DON requirements and NAVSEA directives.
• Security Authorization Package coordination: Compile, review, and submit complete, accurate packages (e.g., SSP, SAR, POA&M, eMASS entries) to enable timely ATO decisions; plan ATO execution milestones and remedial actions.
• Control assessment & validation: Conduct and validate security control assessments aligned to DoD/DON guidelines, ensuring systems meet confidentiality, integrity, and availability objectives; document objective evidence and assessment results.
• Vulnerability management: Oversee vulnerability scanning (e.g., ACAS/Tenable), checklist completion (e.g., STIGs, SRGs), and risk analysis; track findings through POA&M closure with stakeholders.
• Artifact quality & compliance: Review security documentation for completeness, accuracy, and compliance prior to submission; standardize templates and improve process quality across the portfolio.
• Continuous monitoring: Implement dashboards and cadence for ongoing assessments, patch management status, control monitoring, and risk reporting; recommend risk mitigations and compensating controls.
• Stakeholder engagement: Coordinate with system owners, ISSOs/ISSMs, PMs, engineers, and validators; brief leadership on risk posture, authorization status, and mitigation strategies.
• Governance & best practices: Advise on cybersecurity policies, DON/DoD directives, and emerging requirements; contribute to process improvements, playbooks, and training.

Qualifications

• At least 10 years of experience in IT functions such as network administration, engineering, or cybersecurity and a Bachelor's Degree in Cybersecurity, Computer Science, Information Technology, or a related field is desired.
• Navy Qualified Validator (NQV) certification.
• Proficient in managing end-to-end Risk Management Framework (RMF) activities, including coordination of Security Authorization Packages and ATO execution planning.
• Demonstrated ability to conduct and validate control assessments in accordance with DoD and DON guidelines, ensuring systems meet security requirements.
• Experienced in overseeing vulnerability scans, checklist completion, and risk analysis to support comprehensive system evaluations.
• Adept at reviewing and compiling security artifacts and documentation to ensure completeness and compliance prior to submission for ATO decision.
• Candidate must currently possess an active Secret clearance with the ability to obtain a Top Secret. This position is an IT-I Critical Sensitive Position.