Cybersecurity Analyst
Job Description
Support federal cybersecurity authorization and continuous monitoring using the NIST Risk Management Framework (RMF) for systems supporting mission needs.
Responsibilities
- Own RMF life-cycle activities: system categorization, control selection and validation, assessments, authorization support, and continuous monitoring
- Develop and maintain RMF documentation, including SSPs, SAPs/SARs, POA&Ms, risk assessments, PIAs, and continuous monitoring artifacts
- Perform risk assessments, control gap analyses, and vulnerability reviews; assess impact and recommend risk-based remediation
- Coordinate with system owners, network engineers, and administrators to implement and document NIST SP 800-53 controls and support daily operations
- Support the ATO process by preparing authorization packages, tracking findings, coordinating assessor requests, and briefing stakeholders on residual risk and remediation
- Monitor compliance with FISMA, NIST, agency policies, and contractual cybersecurity requirements
- Support internal and external audits by collecting evidence, mapping controls, conducting interviews, and tracking corrective actions
- Analyze vulnerability scans, security tool outputs, and operational data to identify trends, validate control effectiveness, and support continuous diagnostics and mitigation
- Provide cybersecurity guidance and training to system owners, administrators, and users on requirements, secure practices, and documentation
- Develop cybersecurity policies, procedures, standards, and governance processes to strengthen compliance and risk management
Requirements
- Bachelor’s degree in IT, Computer Science, or a related field (preferred); equivalent combination of education, certifications, and relevant experience will be considered
- Active Top Secret clearance with ability to obtain a SCI
- 3–5 years of cybersecurity experience supporting RMF, compliance, assessments, or ISSO functions in federal or regulated environments
- Knowledge of NIST SP 800-37/53, FISMA, FIPS 199/200, and related federal guidance
- Knowledge of DISA CCIs and NIST SP 800-53 mapping
- Experience maintaining RMF documentation, authorization packages, and continuous monitoring
- Ability to assess risk, interpret scans, prioritize remediation, and communicate technical risk
- Familiarity with vulnerability management, SIEM, endpoint security, CDM, and eMASS or similar platforms (preferred)
- Strong technical writing, documentation, presentation, audit, and executive reporting skills
- Ability to work independently, prioritize tasks, and collaborate across teams
- Preferred Qualifications (must have at least 2): CompTIA Security+ CE
- Preferred Qualifications (must have at least 2): ISC2 CGRC
- Preferred Qualifications (must have at least 2): CompTIA CySA+
- Preferred Qualifications (must have at least 2): CISSP or CISM
- Preferred Qualifications (must have at least 2): DoD Manual 8140.3
- Preferred Qualifications (must have at least 2): IAT Level II
Technologies
- NIST Risk Management Framework (RMF)
- NIST SP 800-53
- NIST SP 800-37
- FISMA
- FIPS 199
- FIPS 200
- DISA CCIs
- eMASS
- SIEM
- Endpoint security
- CDM
- eMASS or similar platforms
- CompTIA Security+ CE
- ISC2 CGRC
- CompTIA CySA+
- CISSP
- CISM
- DoD Manual 8140.3
- IAT Level II
Compensation
- USD 190,000 - 200,000 per year
Benefits
- Paid Time Off & Holiday Pay
- Medical Insurance
- Dental Insurance
- Vision Insurance
- Disability, Life Insurance, and AD&D
- Flexible Spending Accounts
- Pre-Tax 401K and/or After-Tax Roth IRA (with employer matching contribution)
- Tuition and Technical Training Reimbursement
- Exercise Reimbursement
- Employee Assistance Program
- Collaborative and dynamic work environment
Work Location and Arrangement
- Washington, DC (onsite)
Clearance
- Must have an active Top Secret clearance and be able to obtain a SCI
Physical Demands
- Regularly required to stand, sit, talk, hear, reach, stoop, kneel, and use hands and fingers to operate a computer, telephone, keyboard, and standard office equipment
- Close vision requirements due to computer work
- Occasionally lift and/or move up to 15 pounds
- Fine hand manipulation (keyboarding)
About Edgewater Federal Solutions, Inc.
- Privately held government contracting firm located in Frederick, MD
- Founded in 2002 to support customer missions through employee empowerment, exceptional services, and timely delivery
- ISO 9001, 20000-1, 27001 certified; appraised at CMMI Level 3 Maturity for Development and Services
- Named in Top Workplaces in the Greater Washington Area Companies since 2018