FedRAMP Cloud Security Analyst (RMF)

BridgePhase, LLC; Herndon (VA); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Competitive compensation

Bonus programs

Flexible PTO

Federal holidays

Sick days

Parental leave

401(k) with match

Medical/dental/vision

Disability insurance

Life insurance

Pet insurance

Professional development budget

Community service days

Team social budget

Job summary

BridgePhase, LLC is seeking an IT Security Analyst to support cybersecurity operations, vulnerability management, and continuous compliance within a FedRAMP-authorized cloud environment. You will work with cybersecurity, cloud operations, and technical teams to maintain security documentation, assess vulnerabilities, and ensure compliance across enterprise systems.

The role requires U.S. citizenship, hybrid onsite work in Herndon, VA three days per week, and strong knowledge of FedRAMP, NIST

Qualifications

• Bachelor's degree in a technical field.
• Experience with cybersecurity operations and vulnerability management.
• Strong understanding of FedRAMP, FISMA, NIST RMF.
• Knowledge of DoD security requirements (DISA STIGs/SRGs).
• Experience documenting security controls, POA&Ms, and ATO processes.
• Experience scanning containers and pipelines in cloud environments.
• Scripting skills for automation (Python/PowerShell/Bash).
• Familiarity with cloud security, IAM, networking, OS hardening.

Responsibilities

• Support cybersecurity operations and continuous compliance in FedRAMP cloud environments.
• Maintain security documentation, artifacts, policies, and authorization packages.
• Track POA&Ms and remediation milestones through resolution.
• Collaborate with Cloud Operations to remediate vulnerabilities across cloud infra and containers.
• Perform vulnerability assessments and risk-based remediation planning.
• Develop automation scripts to streamline identification, analysis, reporting, and remediation workflows.
• Analyze container security vulnerabilities and coordinate corrective actions.
• Support security assessments of CI/CD pipelines and container registries (ECR).
• Assist RMF assessments and ATO documentation.
• Provide guidance on security controls and architecture to stakeholders.

Skills

Vulnerability management

FedRAMP/NIST knowledge

Cloud security

Automation scripting

Risk assessment

Education

Bachelor's degree in Computer Science/Cybersecurity/related field

Tools

Python

Bash

PowerShell

Java

CI/CD pipelines

AWS ECR

Job description

BridgePhase, LLC is seeking an IT Security Analyst to support cybersecurity operations, vulnerability management, and continuous compliance within a FedRAMP-authorized cloud environment. You will work with cybersecurity, cloud operations, and technical teams to maintain security documentation, assess vulnerabilities, and ensure compliance across enterprise systems.

The role requires U.S. citizenship, hybrid onsite work in Herndon, VA three days per week, and strong knowledge of FedRAMP, NIST