Senior Cybersecurity Analyst - RMF/NIST A&A (Remote)

Akima; Washington (District of Columbia); Remote; USD 130.000 - 150.000; Vollzeit

Benefits dieser Stelle

Medical insurance

Dental insurance

Vision insurance

Life insurance

401(k)

Paid PTO

Zusammenfassung

Akima’s Office of the Chief Information Officer (OCIO) is seeking a Cyber Security Analyst III to support DOE missions by conducting assessments of security controls, reviews of control implementations, and preparation of assessment reports. The role includes A&A package work, RMF familiarity, and involvement in continuous monitoring across cloud and on-prem environments.

The position offers remote work and a pay range of $130,000–$150,000 with comprehensive benefits and opportunities for growth

Qualifikationen

• Bachelor’s Degree or four (4) years of equivalent work experience.
• 5–7 years of experience in cybersecurity operations, security control assessments, or related technical security functions.
• Experience in assessing and determining control applicability, such as inheritance, hybrid, independent (standalone).
• Experience performing detailed reviews of controls, technical security control testing for each of the component types, including development of security and privacy assessment plans.
• Experience with the RMF process and understanding each phase of the RMF process and possess a strong understanding of the NIST SP 800-53 security and privacy controls, the NIST Cybersecurity Framework, and other information security and privacy laws and regulations.
• Ability to analyze information system configurations and technical specifications against NIST SP 800-53 and other overlays.
• Experience conducting security assessments within federal cybersecurity frameworks (such as NIST RMF, NIST SP 800‑53).
• Ability to analyze and document risks, incidents, and vulnerabilities clearly and accurately, and provide results of analysis and recommendations as required.

Aufgaben

• Conduct assessments of implemented security and privacy controls to determine effectiveness and alignment with DOE requirements.
• Review control implementations for accuracy, operating effectiveness, and alignment with security and privacy outcomes.
• Document findings, deficiencies, and recommended corrective actions in formal assessment reports and deliver results to Team Leaders.
• Conduct initial remediation actions and reassess remediated controls to verify successful implementation.
• Assess system-specific and inherited controls in accordance with DOE’s continuous monitoring strategy.
• Contribute to cybersecurity performance metrics, deliverables, and reporting requirements.
• Perform assessments of existing and new NIST and FISMA systems, including subsystems within respective system boundaries, communicate results, articulate potential implications of identified control weaknesses, and document through artifacts and documentation.
• Support assessments within Cloud environments such as SaaS, PaaS, and IaaS, and systems and platforms within an on-prem environment.
• Review, analyze, and create A&A packages to include ARW, SAP, SARs, and Risk Assessments for completeness, accuracy, and effectiveness of controls.
• Review, analyze, and create findings packages outlining identified findings, weaknesses, remediation, and provide an overview during findings meeting reviews.
• Participate in the review of significant system change requests, deviation requests, and provide input and feedback on potential system or system security impacts.
• Review and analyze vulnerability scan reports, test reports, and POA&Ms, Hardware/Software lists, Network Diagrams, Data Flows, System Change Requests/Proposal, for completeness, accuracy, effectiveness of controls, and plans and procedures implementation.
• Document and provide findings and recommendations that are concise, grammatically correct, system- and platform-specific, and actionable and executable.
• Respond to security-and system-related data calls for internal and external audits such as FISMA and data calls as requested.

Kenntnisse

Security assessments

RMF process

NIST SP 800-53

NIST CSF

FISMA compliance

Documentation

A&A packages

Ausbildung

Bachelor’s Degree or four (4) years of equivalent work experience

Jobbeschreibung

Akima’s Office of the Chief Information Officer (OCIO) is seeking a Cyber Security Analyst III to support DOE missions by conducting assessments of security controls, reviews of control implementations, and preparation of assessment reports. The role includes A&A package work, RMF familiarity, and involvement in continuous monitoring across cloud and on-prem environments.

The position offers remote work and a pay range of $130,000–$150,000 with comprehensive benefits and opportunities for growth