Cybersecurity Analyst - Senior

This is a part-time position with approximately 20 hours expected per week.

Contract

DISA CTAS

Job Description

The Cyber Risk Assessment Analyst – Senior provides advanced oversight and expertise in the Information Assurance Vulnerability Management (IAVM) program, ensuring that vulnerabilities across IE1 and IE6 systems are identified, tracked, mitigated, and documented in accordance with DISA policy and DoD directives. This position ensures that DISA maintains readiness for CCRI and other inspections, and that vulnerability management aligns with RMF and FISMA compliance requirements.

Key Tasks and Responsibilities

• Review and validate newly released IAVMs, STIGs, and SRGs for applicability across IE1 and IE6 environments.

• Coordinate with ISSMs/engineers to ensure that required remediations are applied within mandated timelines.

• Draft, submit, and track waiver requests for vulnerabilities that cannot be remediated.

• Maintain and update POA&Ms related to IAVM findings, ensuring bi-monthly reporting.

• Prepare compliance evidence/reports submission to Government, supporting FISMA/CCRI readiness.

• Mentor intermediate and junior analysts on vulnerability management processes, ensuring quality control and alignment with contract deliverables.

Education & Experience

Preferred but not all required cybersecurity experience (Bachelor’s degree or equivalent experience required):

• Command Cyber Readiness Inspection (CCRI)

• Site Assistance Visit (SAV)/ Assessment and Authorization (A&A)

• Cyber Self-Assessments

• Assist in the preparation of CVPA (Cooperative Vulnerability and Penetration Assessment)

• AA (Adversary Assessment)

• DISA Risk Management Executive (RME)

• Decision Support System (DSS)

• Auditing and reporting of systems, networks, documentation, RMF controls, DoD 8140.03 requirements, IAVMs, STIGs and DISA Task Order (DTO) and CYBERCOM Task Order (CTO)

Job Requirements: