Remote Cybersecurity Analyst – RMF/A&A for Federal Systems

SHR Consulting Group; Alexandria (VA); Remoto; USD 115.000 - 145.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical, dental, vision

401(k)

Paid time off

Certification reimbursement

Training support

Life and disability insurance

Descrizione del lavoro

SHR Consulting Group is seeking a Cybersecurity Analyst / ISSO to provide cybersecurity, risk management, compliance, and continuous monitoring support for FEMA information systems and cloud environments. The ISSO will work with FEMA stakeholders to maintain system security posture and RMF compliance.

Responsibilities include developing and updating security documentation, supporting A&A activities, and coordinating with cross-functional teams to remediate vulnerabilities and ensure secure

Competenze

• 5+ years of cybersecurity or information assurance experience.
• RMF, A&A, security control implementation, continuous monitoring, vulnerability management, and POA&M management.
• Familiarity with NIST SP 800-53, NIST 800-37, FISMA, FedRAMP, and federal cybersecurity requirements.

Mansioni

• Implement RMF and DHS/FEMA security policies and procedures.
• Maintain SSPs, SARs, POA&Ms, Contingency and Configuration Management Plans, and related artifacts.
• Support A&A activities for FEMA systems and cloud environments.
• Maintain security documentation in DHS/FEMA governance, risk, and compliance systems.

Conoscenze

RMF

A&A

Vulnerability management

Documentation

Stakeholder comms

Formazione

Bachelor's degree in Cybersecurity

Strumenti

Tenable/Nessus

CrowdStrike

Elastic

SIEM

AWS/Azure

Descrizione del lavoro

SHR Consulting Group is seeking a Cybersecurity Analyst / ISSO to provide cybersecurity, risk management, compliance, and continuous monitoring support for FEMA information systems and cloud environments. The ISSO will work with FEMA stakeholders to maintain system security posture and RMF compliance.

Responsibilities include developing and updating security documentation, supporting A&A activities, and coordinating with cross-functional teams to remediate vulnerabilities and ensure secure