Cybersecurity Analyst

Role overview Support cybersecurity risk management and authorization work across federal healthcare IT projects. You’ll help systems meet security and privacy requirements by maintaining authorization evidence, assessing controls, tracking vulnerabilities and remediation, and coordinating with security, engineering, and program stakeholders. The work includes independent ownership of assigned deliverables in a collaborative remote environment.

Responsibilities - Prepare and maintain Authority to Operate packages, security control evidence, compliance reports, and related documentation. - Apply the Risk Management Framework and relevant federal security requirements to system assessments, authorization, and continuous monitoring. - Review vulnerability scan results, coordinate fixes, and track remediation and Plans of Action and Milestones through closure. - Work with system owners, ISSOs, engineers, and project leads to identify risks, meet authorization needs, and maintain audit readiness. - Support privacy assessments, contingency and incident response documentation, and required security reviews or exercises. - Maintain records in governance, risk, and compliance platforms and workflow tools; communicate risks, priorities, and progress.

Requirements - At least five years of cybersecurity, information assurance, or federal security compliance experience. - A relevant bachelor’s degree plus five years of experience, or an additional five years of relevant experience in place of the degree. - Hands-on experience supporting federal ATO processes and applying the NIST RMF, including security control documentation and monitoring. - Working knowledge of FISMA, NIST SP 800-53, and federal cybersecurity requirements; healthcare privacy and security familiarity is also sought. - Experience maintaining authorization packages, tracking POA&Ms, analyzing vulnerabilities, and coordinating remediation. - A current qualifying cybersecurity certification, such as Security+, GSEC, CISSP, or CISM; strong writing, analysis, and stakeholder coordination skills.

Nice to have - Direct experience with federal healthcare security programs, VA-specific tools, ACAS, Nessus, or HBSS. - Experience with cloud or SaaS authorization, FedRAMP, cloud security, or federal modernization work. - Familiarity with Agile delivery, security integration into the development lifecycle, or healthcare applications.

Benefits and work setup The listing gives a salary range of $80,000–$90,000 and notes that final compensation may vary by experience, skills, location, and role requirements. It also describes comprehensive benefits for eligible employees and a remote team environment. Candidates must be able to obtain and maintain Public Trust clearance.