Cybersecurity Analyst V (Senior)

People, Technology & Processes, LLC; Washington (District of Columbia); Sur place; USD 120 000 - 170 000; Plein temps

Résumé du poste

People, Technology & Processes, LLC is seeking a Senior Cybersecurity Analyst to drive RMF lifecycle execution for DoD/DON programs in Washington, DC. You will lead Security Authorization Package coordination and ensure timely ATO decisions.

In this role you will manage vulnerability scans, control assessments, continuous monitoring dashboards, and cross‑functional engagement with ISSOs, PMs, engineers, and leadership to strengthen the enterprise security posture.

Qualifications

• 10+ years of IT or cybersecurity experience with a related degree
• Active Secret clearance with ability to obtain Top Secret
• Naval/DoD RMF experience and NQV certification

Responsabilités

• Lead RMF lifecycle execution across programs meeting DoD/DON requirements
• Coordinate Security Authorization Packages and ATO planning
• Conduct and validate DoD/DON-aligned control assessments
• Oversee vulnerability scans (ACAS/Tenable) and risk analysis
• Review and standardize security artifacts for submission
• Establish continuous monitoring dashboards and risk reporting
• Engage with system owners, ISSOs/ISSMs, PMs, engineers, and validators
• Advise on cybersecurity policies and emerging requirements

Connaissances

RMF lifecycle management

ATO coordination

Vulnerability management

Security artifacts & documentation

Stakeholder collaboration

Formation

Bachelor’s degree in Cybersecurity / CS / IT or related field

Navy Qualified Validator (NQV) certification

Outils

eMASS

ACAS / Tenable

STIGs & SRGs

Description du poste

Description
Title: Cybersecurity Analyst V (Senior)
Clearance Type: Secret with the ability to obtain a Top Secret
Responsibilities Include (but Are Not Limited To)

• Lead RMF lifecycle execution: Develop, manage, and maintain RMF artifacts (system categorization, control selection/implementation, assessment, authorization, and continuous monitoring) to meet DoD/DON requirements and NAVSEA directives.
• Security Authorization Package coordination: Compile, review, and submit complete, accurate packages (e.g., SSP, SAR, POA&M, eMASS entries) to enable timely ATO decisions; plan ATO execution milestones and remedial actions.
• Control assessment & validation: Conduct and validate security control assessments aligned to DoD/DON guidelines, ensuring systems meet confidentiality, integrity, and availability objectives; document objective evidence and assessment results.
• Vulnerability management: Oversee vulnerability scanning (e.g., ACAS/Tenable), checklist completion (e.g., STIGs, SRGs), and risk analysis; track findings through POA&M closure with stakeholders.
• Artifact quality & compliance: Review security documentation for completeness, accuracy, and compliance prior to submission; standardize templates and improve process quality across the portfolio.
• Continuous monitoring: Implement dashboards and cadence for ongoing assessments, patch management status, control monitoring, and risk reporting; recommend risk mitigations and compensating controls.
• Stakeholder engagement: Coordinate with system owners, ISSOs/ISSMs, PMs, engineers, and validators; brief leadership on risk posture, authorization status, and mitigation strategies.
• Governance & best practices: Advise on cybersecurity policies, DON/DoD directives, and emerging requirements; contribute to process improvements, playbooks, and training.

Qualifications

• At least 10 years of experience in IT functions such as network administration, engineering, or cybersecurity and Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, or a related field is desired.
• Navy Qualified Validator (NQV) certification.
• Proficient in managing end-to-end Risk Management Framework (RMF) activities, including coordination of Security Authorization Packages and ATO execution planning.
• Demonstrated ability to conduct and validate control assessments in accordance with DoD and DON guidelines, ensuring systems meet security requirements.
• Experienced in overseeing vulnerability scans, checklist completion, and risk analysis to support comprehensive system evaluations.
• Adept at reviewing and compiling security artifacts and documentation to ensure completeness and compliance prior to submission for ATO decision.
• Candidate must currently possess an active Secret clearance with the ability to obtain a Top Secret. This position is an IT-I Critical Sensitive Position.