Security Documentation & Continuous Monitoring Analyst

Conviso Inc.; Washington, Baltimore (District of Columbia, MD); Hybrid; USD 85,000 - 125,000; Full time

Job summary

Conviso Inc. in Washington, DC is seeking a Security Documentation & Continuous Monitoring Analyst to own the monthly reporting, posture data maintenance, and CSAM artifacts. The role focuses on continuous monitoring (TA3) and security documentation (TA5) with a strong emphasis on delivering on a fixed schedule.

Requirements include 3+ years of federal cybersecurity documentation experience, Security+ certification, and working knowledge of NIST SP 800-137 and 800-53 Rev. 5.

Qualifications

• Bachelor's degree in a related field, or four additional years of relevant experience.
• 3+ years experience in federal cybersecurity documentation, continuous monitoring, or compliance reporting.
• Demonstrated experience producing recurring compliance deliverables to a fixed schedule.
• Working knowledge of NIST SP 800-137 and 800-53 Rev. 5.
• Splunk search proficiency sufficient to verify log ingestion.
• Strong technical writing; Security+ required.

Responsibilities

• Produce the consolidated monthly Continuous Monitoring Report covering the portfolio, delivered by the 5th business day.
• Keep the existing CSAM enterprise dashboard current with authorization and posture data — maintenance only, no dashboard engineering.
• Perform the monthly Splunk log-ingestion compliance audit: compare each system's expected log-source baseline against actual ingestion, and open a ticket and linked POA&M for every confirmed gap.
• Escalate Splunk ingestion failures to the Enterprise IT Operations contractor within 1 business day of detection.
• Maintain per-system Continuous Monitoring Plans in CSAM.
• Maintain CSAM artifact currency and consistency; archive superseded versions per DFC records policy.
• Maintain the SharePoint repository for artifacts not native to CSAM, cross-referenced from the applicable CSAM record.

Skills

Technical writing

Continuous monitoring

Federal cybersecurity

Splunk proficiency

Security+

CSAM familiarity

Education

Bachelor's degree in a related field

Four additional years of relevant experience

Tools

Splunk

SharePoint

Job description

Security Documentation & Continuous Monitoring Analyst

Location: Washington, DC. Hybrid, with a minimum of two days per week onsite

Duration: Full time

Security Clearance Must have: Tier 4 (High-Risk Public Trust) or Higher.

Role summary

Primary for continuous monitoring (TA3) and security documentation (TA5). This seat produces most of the recurring deliverable set and owns CSAM artifact hygiene across the portfolio. This is a working continuous monitoring role, not an administrative documentation seat — it carries the second-largest hour allocation on the contract.

Responsibilities

Produce the consolidated monthly Continuous Monitoring Report covering the portfolio, delivered by the 5th business day

Keep the existing CSAM enterprise dashboard current with authorization and posture data — maintenance only, no dashboard engineering

Perform the monthly Splunk log-ingestion compliance audit: compare each system's expected log-source baseline against actual ingestion, and open a ticket and linked POA&M for every confirmed gap

Escalate Splunk ingestion failures to the Enterprise IT Operations contractor within 1 business day of detection

Maintain per-system Continuous Monitoring Plans in CSAM

Maintain CSAM artifact currency and consistency; archive superseded versions per DFC records policy

Maintain the SharePoint repository for artifacts not native to CSAM, cross-referenced from the applicable CSAM record

Bachelor's degree in a related field, or four additional years of relevant experience

3+ years experience in federal cybersecurity documentation, continuous monitoring, or compliance reporting

Demonstrated experience producing recurring compliance deliverables to a fixed schedule

Working knowledge of NIST SP 800-137 and 800-53 Rev. 5

Splunk search proficiency sufficient to verify log ingestion completeness against an expected source list

Strong technical writing; Security+ required