Cybersecurity Requirements Analyst

Role overview A service-disabled, veteran-owned small business is hiring a Cybersecurity Requirements Analyst to support government customers in achieving their mission objectives. The role centers on translating federal cybersecurity frameworks into actionable requirements and assessment evidence across cloud, hybrid, and on-premises environments. It is classified at the Engineer 1 professional level and sits within a broader cybersecurity, compliance, and risk practice.

Responsibilities - Review system documentation, technical evidence, and prior assessment results against NIST, FISMA, RMF, FedRAMP, and Zero Trust requirements. - Elicit, document, and maintain cybersecurity requirements spanning cloud, hybrid, and on-premises architectures. - Conduct control-gap analyses and maturity assessments, surfacing risks and recommending corrective actions. - Support authorization and assessment efforts by drafting security plans, control implementation statements, assessment artifacts, and remediation documentation. - Track findings, evidence requests, Plans of Action and Milestones (POA&Ms), and remediation status in eMASS or comparable governance, risk, and compliance tooling. - Partner with system owners, engineers, cloud teams, and program stakeholders to resolve security requirements and validate remediation work. - Produce concise assessment reports, risk summaries, and leadership briefings that explain findings, impacts, and next steps.

Requirements - Five or more years of experience in cybersecurity analysis, security requirements, governance, risk, compliance, or security assessment work. - Working knowledge of the NIST Risk Management Framework, NIST SP 800-53 controls, FISMA, FedRAMP, and authorization-to-operate processes. - Demonstrated experience assessing security controls, analyzing evidence, documenting gaps, and driving POA&Ms to closure. - Familiarity with Zero Trust principles and with cybersecurity requirements for cloud, hybrid, or on-premises environments. - Bachelor's degree in cybersecurity, information systems, information technology, engineering, or a related field, or equivalent relevant experience; a master's degree in a related field is preferred. - Strong analytical, organizational, written communication, and collaboration skills.

Benefits and work setup - Posted salary range of $62,818–$69,738 USD; final compensation depends on experience, skills, and other factors. - Applicants will be subject to a security investigation and must meet eligibility requirements for access to classified information. - Comprehensive benefits package includes medical, dental, vision, voluntary life insurance, 401(k), basic life and accidental death & disability, short- and long-term disability, paid time off, telehealth, paid holidays, FSA, and HSA. - Additional resources include an Employee Assistance Program (EAP) and traveling assistance. - Employer is an equal opportunity employer that hires without regard to race, color, religion, sex, national origin, age, marital status, sexual orientation, gender identity, disability, veteran or uniformed service-member status, genetic information, or any other status protected by applicable law.