Cybersecurity Consultant

Guidehouse is hiring a Cybersecurity Consultant in Bethesda, MD (onsite) to lead vulnerability management activities, support POA&M execution, improve reporting and metrics, and provide cyber subject matter expertise across federal environments.

Key Responsibilities

• Lead vulnerability management for a portfolio of client applications, including analyzing findings, determining impacted versions, providing remediation guidance, assigning issues to responsible teams, and tracking vulnerabilities through closure.
• Maintain working relationships across business, engineering, and security teams to validate remediation efforts, remove blockers, and support timely fixes.
• Support POA&M activities, including patching timelines, remediation deadlines, and adherence to related federal cybersecurity and compliance requirements.
• Develop and maintain automated vulnerability reporting, dashboards, KPIs, and metrics to track remediation progress, identify compliance gaps, and assess asset risk.
• Prepare reports and briefings for leadership and federal oversight stakeholders.
• Monitor suspicious activity and security alerts in Splunk and coordinate follow-up actions with the appropriate teams.
• Contribute to secure development efforts by supporting security documentation, secure coding guidance, annual training support, and evaluation of security tools and processes.
• Provide cyber subject matter expertise during information security audits and assessments.

Required Qualifications

• Minimum 2+ years of experience.
• Cybersecurity or IT risk management experience, with preference for candidates focused on vulnerability management and/or secure configuration.
• Bachelor’s Degree required.
• Hands-on experience with Invicti, Splunk, and Atlassian tools (Jira & Confluence).
• Deep understanding of NIST SP 800-53, FISMA requirements, and the OWASP Top 10.
• Active CompTIA Security+ CE preferred; CISSP, CEH, or cloud-related certifications are a plus.
• Strong communication and analytical skills, with the ability to manage multiple concurrent priorities and deadlines.
• Must be able to obtain and maintain a Federal or DoD “PUBLIC TRUST”. Approved adjudication is required prior to onboarding with Guidehouse. Active PUBLIC TRUST or SUITABILITY and an active HHS/NIH clearance are preferred.

Technologies and Frameworks

• Invicti
• Splunk
• Atlassian tools (Jira & Confluence)
• Power BI
• NIST SP 800-53
• FISMA requirements
• OWASP Top 10
• MITRE ATT&CK framework

Nice to Have

• Experience building automated data pipelines or integrating APIs into Power BI dashboards.
• Knowledge of the MITRE ATT&CK framework and vulnerability prioritization methodologies (examples provided: EPSS, CVSS v3).
• Prior experience supporting a federal agency or working in a Public Health environment.

Travel Requirement

Up to 25% travel may be required.

Compensation

Estimated salary range: USD 85,000 - 141,000 per year.

Benefits

• Medical, Rx, Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Position may be eligible for a discretionary variable incentive bonus
• Parental Leave and Adoption Assistance
• 401(k) Retirement Plan
• Basic Life & Supplemental Life
• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
• Short-Term & Long-Term Disability
• Student Loan PayDown
• Tuition Reimbursement, Personal Development & Learning Opportunities
• Skills Development & Certifications
• Employee Referral Program
• Corporate Sponsored Events & Community Outreach
• Emergency Back-Up Childcare Program
• Mobility Stipend

Job Family

Cyber Consulting