Senior FAA Cybersecurity Analyst — Lead On-Site Assessments

Ochtec; Washington (NJ); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Paid time off and Holidays

Medical, Dental, and Vision Insurance

401(k)

Tuition Reimbursement

Life Insurance

Short-term/Long-term Disability

Job summary

OCH Technologies, LLC seeks a Senior Cybersecurity Analyst to execute independent risk assessments and vulnerability scans across NAS and Mission Support systems at FAA hub locations in OKC, Egg Harbor, and Washington, DC. You will own assigned systems, lead on-site test events, and deliver SARs and POAMs with actionable remediation steps.

The role requires 8+ years of security assessment experience, strong knowledge of NIST SP 800-53A and RMF, and relevant certifications.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Mathematics, or Physics.
• 8+ years of hands-on security assessments experience, with at least 2 years recent.
• Knowledge of NIST SP 800-53A, RMF, and FIPS-199.
• Proficiency with vulnerability scanning tools (Nessus, WebInspect, nMap, etc.).

Responsibilities

• Execute independent risk assessments on NAS and Mission Support systems.
• Lead on-site assessment events at FAA facilities nationwide.
• Develop SARs documenting findings, risk levels, and mitigations.
• Create POAMs with actionable remediation steps.
• Perform regression assessments to verify remediation.

Skills

Risk assessment

Vulnerability assessment

Interviews

Communication

Team leadership

Education

Bachelor's degree in Cybersecurity/CS/IT/Engineering/Math/Physics

Tools

Nessus

WebInspect

nMap

AppDetective Pro

Job description

OCH Technologies, LLC seeks a Senior Cybersecurity Analyst to execute independent risk assessments and vulnerability scans across NAS and Mission Support systems at FAA hub locations in OKC, Egg Harbor, and Washington, DC. You will own assigned systems, lead on-site test events, and deliver SARs and POAMs with actionable remediation steps.

The role requires 8+ years of security assessment experience, strong knowledge of NIST SP 800-53A and RMF, and relevant certifications.