Remote Cybersecurity Analyst | ISSO for Federal Systems

SHR Consulting Group; Alexandria (VA); Hybrid; USD 115,000 - 145,000; Full time

Benefits offered by this job

Competitive compensation

Medical, dental, vision

401(k) with company contribution

Paid time off and holidays

Certification reimbursement and培训

Job summary

SHR Consulting Group is seeking a Cybersecurity Analyst/ISSO to support FEMA information systems and cloud environments. The role centers on RMF, A&A, and continuous monitoring to maintain security posture and compliance with DHS/FEMA requirements.

Responsibilities include documenting SSPs/SARs/POA&Ms, coordinating with stakeholders, and guiding vulnerability management and continuous monitoring activities across complex environments.

Qualifications

• 5+ years of cybersecurity or information assurance experience.
• Experience supporting RMF, A&A, security control implementation, continuous monitoring, vulnerability management, and POA&M management.
• Familiarity with NIST SP 800-53, 800-37, FISMA, FedRAMP, and federal cybersecurity requirements.
• Bachelor’s degree in a related field; U.S. citizenship and eligibility for DHS/FEMA clearance.

Responsibilities

• Support RMF implementation and DHS/FEMA security policies.
• Develop and maintain SSPs, SARs, POA&Ms, and related artifacts.
• Support A&A activities for FEMA systems and cloud environments.
• Maintain security evidence in DHS/FEMA governance and risk systems.
• Perform and document security control assessments and support NIST 800-53 controls.

Skills

RMF/A&A experience

NIST SP 800-53/800-37 knowledge

Cybersecurity documentation

AWS and/or Azure knowledge

Strong communication skills

Security compliance awareness

Vulnerability management

DevSecOps collaboration

Education

Bachelor's degree in Cybersecurity/IT/CS/IS

Tools

Tenable/Nessus

CrowdStrike

Elastic

GRC systems

Job description

SHR Consulting Group is seeking a Cybersecurity Analyst/ISSO to support FEMA information systems and cloud environments. The role centers on RMF, A&A, and continuous monitoring to maintain security posture and compliance with DHS/FEMA requirements.

Responsibilities include documenting SSPs/SARs/POA&Ms, coordinating with stakeholders, and guiding vulnerability management and continuous monitoring activities across complex environments.