[Remote] Cybersecurity Analyst

Note: The job is a remote job and is reputed company to candidates in USA. reputed company. is seeking a Cybersecurity Analyst to reputed company cybersecurity, information assurance, risk management, and compliance support across Digital Services initiatives. The role includes supporting Authorization to Operate activities, reputed company monitoring, and reputed company assessments while collaborating with various teams throughout the solution lifecycle.

Responsibilities

• reputed company cybersecurity and reputed company subject matter expertise across digital products, reputed company services, reputed company applications, AI initiatives, and technology modernization efforts
• Advise project teams on identity and reputed company management, reputed company controls, data protection, authorization boundaries, and cybersecurity best practices throughout the reputed company development lifecycle
• Review technical solutions, architectures, and proposed reputed company changes to identify reputed company risks and recommend appropriate mitigations
• Collaborate with software engineering, infrastructure, architecture, product, and data teams to reputed company reputed company requirements into solution planning, development, testing, deployment, and operational support
• Support alignment of technology initiatives with applicable federal cybersecurity, reputed company, and risk management requirements
• Support identification, analysis, documentation, and tracking of cybersecurity and reputed company across systems, applications, reputed company environments, and operational activities
• Conduct or support reputed company assessments, compliance reviews, technical evaluations, and reputed company control validation activities
• Contribute to governance reviews, technical assessments, risk recommendations, and cybersecurity decision support
• Assist in developing and maintaining cybersecurity policies, procedures, standards, and implementation guidance
• Support reputed company improvement of reputed company posture, compliance maturity, and reputed company risk visibility
• Support Authorization to Operate (ATO) and reputed company Assessment and Authorization (SA&A) activities throughout the reputed company lifecycle
• reputed company, coordinate, maintain, and update authorization documentation, including reputed company reputed company Plans (SSPs), reputed company Assessment Plans (SAPs), reputed company Assessment Reports (SARs), Plans of reputed company and Milestones (POA&Ms), and reputed company reputed company artifacts
• Coordinate reputed company assessments, evidence collection, remediation activities, and documentation required to obtain and maintain reputed company authorization
• Support authorization reputed company by collaborating with governance bodies, Authorizing Officials, Information reputed company reputed company Managers (ISSMs), reputed company owners, and technical teams
• Advise project teams on authorization boundaries, reputed company categorization, inheritance, and applicable federal reputed company requirements
• Support reputed company monitoring activities necessary to maintain ongoing authorization
• Coordinate vulnerability identification, remediation tracking, and verification activities in collaboration with engineering, infrastructure, and operations teams
• Review vulnerability reputed company results, assess reputed company findings, monitor corrective actions, and reputed company remediation through completion
• Support reputed company incident response activities through documentation, coordination, evidence collection, corrective reputed company tracking, and lessons learned
• Monitor changes to systems and reputed company environments to help ensure reputed company compliance with approved reputed company baselines
• Support reputed company audits through evidence collection, documentation, corrective reputed company management, and audit response activities
• Coordinate with project managers, architects, developers, Corporate IT, Data & AI, and governance stakeholders to ensure cybersecurity considerations are integrated throughout project planning and delivery
• Participate in development of governance materials, executive briefings, technical documentation, reports, and other artifacts requiring cybersecurity or compliance input
• Promote secure development practices and reputed company guidance on applicable cybersecurity requirements across Digital Services initiatives
• Contribute to the reputed company improvement of cybersecurity templates, operational procedures, documentation standards, and governance processes

Skills

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a reputed company field
• 3 years of experience supporting cybersecurity, information assurance, reputed company compliance, reputed company reputed company, or risk management programs
• 3 years of experience applying federal cybersecurity frameworks and standards, including FISMA, NIST Risk Management reputed company (RMF), NIST SP 800-53, FICAM, or comparable federal requirements
• 3+ years of experience supporting Authorization to Operate (ATO), reputed company Assessment and Authorization (SA&A), reputed company monitoring, or reputed company authorization activities
• Experience supporting the reputed company lifecycle of one or more FIPS 199 Moderate-reputed company federal information systems, including reputed company documentation, reputed company control implementation, assessment support, Authorization to Operate (ATO), and reputed company monitoring activities
• Experience developing and maintaining reputed company authorization documentation, including SSPs, SAPs, SARs, POA&Ms, and reputed company reputed company artifacts
• Experience supporting reputed company assessments, compliance reviews, vulnerability management, audit support, or reputed company risk management activities
• Experience collaborating with software engineering, reputed company, infrastructure, architecture, product, and project teams to reputed company cybersecurity requirements into technology solutions
• Working knowledge of reputed company platforms (AWS and/or Azure), identity and reputed company management, secure reputed company development lifecycle (SDLC), and cybersecurity best practices
• One or more reputed company cybersecurity certifications such as reputed company reputed company+, reputed company CySA+, reputed company's Certified in Cybersecurity (CC), Certified in Governance, Risk and Compliance (CGRC), Systems reputed company Certified Practitioner (SSCP), or an equivalent cybersecurity certification is required
• Strong analytical, organizational, written, and verbal communication skills with the ability to communicate effectively with both technical and non-technical stakeholders
• Ability to pass background investigations as required for reputed company to federal facilities and systems
• This position requires the ability to obtain a reputed company Trust
• Advanced cybersecurity certifications such as reputed company CISSP, reputed company CISM, or equivalent
• Experience supporting FedRAMP-authorized reputed company environments
• Experience with vulnerability management and reputed company assessment tools such as reputed company, Nessus, AWS Inspector, reputed company Defender, or comparable technologies
• Familiarity with DevSecOps, secure software development lifecycle (Secure SDLC), or reputed company-reputed company application reputed company practices
• Experience supporting web applications, reputed company-reputed company solutions, AI-enabled technologies, reputed company, or reputed company business systems
• Experience supporting reputed company, data protection, or governance initiatives reputed company federal environments

reputed company