Cybersecurity Policy Analyst — DoD RMF & Incident Response

Career Listings; Columbus (OH); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Paid time off

Profit sharing

Training & development

Tuition assistance

Vision insurance

Job summary

SarelaTech is seeking a Cybersecurity Policy Analyst to support the Defense Logistics Agency CSSP. You will develop and maintain cybersecurity policies, SOPs, and TTPs, ensuring alignment with RMF and NIST standards, and work with government stakeholders on assessments and training.

The role focuses on incident response governance, policy enforcement, and documentation quality to strengthen enterprise cyber defense capabilities across DoD programs.

Qualifications

• Top Secret security clearance with SCI eligibility.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or related technical discipline.
• 7+ years of experience supporting cybersecurity policy, governance, compliance, security operations, or Incident Response in a DoD or Federal environment.
• Experience developing and maintaining cybersecurity policies, SOPs, TTPs, technical documentation, or operational procedures.
• Knowledge of DoD cybersecurity policies, RMF, NIST guidance, and cybersecurity compliance requirements.
• Experience supporting cybersecurity compliance activities, inspections, audits, or assessment programs.
• Strong technical writing, documentation, analytical, and presentation skills.
• Ability to communicate effectively with technical teams, cybersecurity leadership, and government stakeholders.

Responsibilities

• Develop, review, maintain, and update cybersecurity policies, SOPs, TTPs, and operational guidance for CSSP operations and Incident Response.
• Ensure policies and documentation comply with DoD, DLA, RMF, NIST, and regulatory requirements.
• Support CSSP assessments, inspections, audits, and compliance activities by preparing documentation and coordinating with government stakeholders.
• Assist DLA programs with RMF documentation and cybersecurity compliance packages.
• Plan, coordinate, and support cybersecurity tabletop exercises; develop AARs and lessons learned.
• Develop and deliver cybersecurity training, presentations, and briefings for government personnel.
• Prepare technical documentation, executive briefings, and status updates for governance and readiness.
• Collaborate with cybersecurity operations, incident response teams, engineers, and government leadership to implement policy updates.

Skills

Technical writing

Policy development

Communication

Security clearance

DoD cybersecurity knowledge

Education

Bachelor's degree in Cybersecurity/IT/CS

Job description

SarelaTech is seeking a Cybersecurity Policy Analyst to support the Defense Logistics Agency CSSP. You will develop and maintain cybersecurity policies, SOPs, and TTPs, ensuring alignment with RMF and NIST standards, and work with government stakeholders on assessments and training.

The role focuses on incident response governance, policy enforcement, and documentation quality to strengthen enterprise cyber defense capabilities across DoD programs.