actuarial analyst, commercial pricing - remote

assistant general counsel, vp : cybersecurity

actuarial analyst, commercial pricing - remote Jobs in Washington

assistant general counsel, vp : cybersecurity Jobs in Washington

associate data analyst, washington d.c. Jobs in Washington

associate data analyst, washington d.c.

business development analyst Jobs in Washington

business development analyst

business immigration analyst (paralegal) Jobs in Washington

business immigration analyst (paralegal)

cybersecurity analyst

Federal Professional Solutions

<p><b>About This Role</b></p><p>As a Cybersecurity Analyst, you will support the security program to ensure assets are protected and assess/manage the security environment through the implementation of new security technologies and controls. To be successful in this role, you will need to have Proficiency in Microsoft Excel for data analysis, reporting, and visualization, strong Splunk and scripting experience. You will also need to have experience in presenting vulnerability information in a way that shows vulnerability trends for a given application, platform, or specific type of technology.</p><p><b>Work Location:</b> Hybrid (minimum 3 days onsite a week) &ndash; Washington, DC</p><p><b>Clearance: </b>U.S. Citizenship and DOD Top Secret clearance</p><p><b>Status: </b>Exempt</p><p><b>Responsibilities:</b><br/>Daily responsibilities may include:</p><p>&middot; Monitor and analyze security alerts from various sources (SIEM, IDS/IPS, firewalls, endpoint protection).</p><p>&middot; Produce daily, weekly, monthly, or quarterly vulnerability reports that track critical, high, medium, and low categorized vulnerabilities in a way that shows actionable date such as a given percent an given platform or vulnerability category has risen or been remediated.</p><p>&middot; Investigate and respond to security incidents, ensuring timely containment and remediation.</p><p>&middot; Perform vulnerability assessments and recommend mitigation strategies.</p><p>&middot; Maintain and update security documentation, including incident reports and playbooks.</p><p>&middot; Collaborate with IT teams to implement security controls and best practices.</p><p>&middot; Conduct threat intelligence research to identify emerging risks and attack vectors.</p><p>&middot; Support compliance efforts with relevant frameworks (e.g., NIST, ISO 27001, etc).</p><p>&middot; Assist in security awareness training for employees.</p><p>&middot; Participate in regular security audits and risk assessments.</p><p>&middot; Provide recommendations for improving overall security posture.</p><p>&middot; Proactively work with engineering, operations, development, and customers to maintain practices that meet defined policies and standards for information security</p><p>&middot; Conduct continuous assessment of current technology architecture for vulnerabilities, weaknesses and other risks</p><p>&middot; Support information security audits performed internally by the organization or third-party personnel</p><p>&middot; Coordinate, detect, measure, and report on the technical aspects of security processes and operational components of incident management</p><p>&middot; Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk</p><p>&middot; Ensure audit trails, system logs and other cybersecurity monitoring data sources are configured in accordance with cybersecurity policy and accessible to necessary parties for review and compliance</p><p>&middot; Support, coordinate, and adhere to security-testing procedures to verify the security of systems, networks and applications, and support the remediation of identified vulnerabilities</p><p>&middot; Liaise among internal teams and external vendors to ensure compliance and a strong security posture</p><p>&middot; Consult with IT staff to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software</p><p>&middot; Recommend and coordinate the implementation of technical controls to support and enforce defined security policies</p><p>&middot; Implement and maintain Splunk / Tenable platform infrastructure and configuration as well as support day-to-day operational and user support</p><p>&middot; Customize Splunk queries and service help desk requests for Splunk / Tenable platform system-related assistance</p><p>&middot; Conducts advanced searching, forensics, and analytics utilizing security tools in support of cybersecurity tasks</p><p><b>Qualifications</b></p><p>&middot; DOD Top Secret clearance SCI</p><p>&middot; One or more Information Security Certifications (i.e Security+, CEH, CISSP, CISA, CISM, CBCP, or GIAC)</p><p>&middot; Bachelor in Cybersecurity or similar field</p><p>&middot; A minimum of 3 years of IT experience, with at least 3 years in an information security role and at least 3 years of experience with Splunk Enterprise</p><p>&middot; A strong understanding of the business impact of security tools, technologies, and policies</p><p>&middot; Analytical skills, and high-level problem-solving skills that allow for effective and efficient resolution to many complex information security issues</p><p>&middot; Proficiency in Microsoft Office Suite (Excel, Word, PowerPoint, Outlook) for documentation, reporting, and presentations</p><p>o Excel: Pivot tables, formulas, data analysis, data visualization for reporting</p><p>o Word: Professional documentation and formatting</p><p>o PowerPoint: Creating clear and engaging presentations</p><p>o Outlook: Efficient email and calendar management</p><p>&middot; Able to complete responsibilities in a timely, professional, and quality manner</p><p>&middot; Collaborative and effective team player and able to express oneself clearly and in technical and non-technical terms to a globally dispersed team</p><p>&middot; Ability to translate specific goals into action and follow through to achieve goals and take initiative, seek and act on opportunities to improve organization performance</p><p>&middot; You do not need to possess 100% of these qualities to be considered</p><p>&middot; You must be available to work onsite as required by job</p><p>Pay: $120,000.00 per year</p><p>Benefits:</p><ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Health insurance</li><li>Paid time off</li><li>Vision insurance</li></ul><p>Application Question(s):</p><ul><li>Are you a U.S. citizen?</li></ul><p>Education:</p><ul><li>Bachelor's (Required)</li></ul><p>Experience:</p><ul><li>Splunk: 3 years (Required)</li><li>IT experience?: 3 years (Required)</li></ul><p>License/Certification:</p><ul><li>CISSP (Preferred)</li><li>CISM (Preferred)</li><li>CRISC (Preferred)</li></ul><p>Security clearance:</p><ul><li>Top Secret (Required)</li></ul><p>Work Location: In person</p>

Cybersecurity Analyst

Karthik Consulting

<div><div><p><b>New</b>
<br>
Posted: May 18, 2026</p>
<p><i>This role is contingent upon award</i></p>
<h2 class="jobSectionHeader"><b>I. Program Overview</b></h2>
<h3 class="jobSectionHeader"><b>Program Description</b></h3>
<p>The IT CSSS program provides information security support to the Federal Bureau of Prisons Information Technology &amp; Data Division and other DOJ components as required. The program supports BOP obligations to protect federal information systems under FISMA, OMB Circular A-130, the Privacy Act, NIST RMF guidance, DOJ policy, and related cybersecurity requirements.</p>
<h3 class="jobSectionHeader"><b>Program Scope</b></h3>
<p>The program covers ATO maintenance and rapid ATO activities, RMF lifecycle support, JCAM-based authorization management, FISMA/FISCAM audit support, security architecture and engineering support, vulnerability and risk management, privacy documentation, FedRAMP assessment support, continuous monitoring, and coordination with BOP system owners, CORs, AOs, and technical stakeholders.</p>
<h2 class="jobSectionHeader"><b>II. Position Overview</b></h2>
<p>The Security Control Assessor/Analyst supports BOP and DOJ cybersecurity authorization activities by assessing security controls, validating evidence, analyzing risk, and preparing assessment documentation for classified and unclassified systems, including National Security Systems. This role supports RMF, ATO maintenance, continuous monitoring, and security authorization activities by ensuring assessments are technically sound, properly documented, and aligned with NIST SP 800-53A, DOJ/BOP requirements, and program delivery expectations.</p>
<h3 class="jobSectionHeader"><b>Work Environment</b></h3>
<ul><li>Work Location: BOP Central Office, Washington, DC; in-office required, telework as approved</li>
<li>Security Clearance: Public Trust / Suitability</li>
</ul><h2 class="jobSectionHeader"><b>III. Key Responsibilities</b></h2>
<h3 class="jobSectionHeader"><b>Security Control Assessment</b></h3>
<ul><li>Assess security and privacy controls for classified and unclassified systems, including National Security Systems, in accordance with NIST SP 800-53A, DOJ/BOP requirements, and approved assessment plans.</li>
<li>Validate implementation evidence, test results, artifacts, and technical documentation to determine whether controls are implemented correctly, operating as intended, and producing the desired security outcome.</li>
<li>Document assessment results, findings, deficiencies, recommendations, and risk implications in Security Assessment Reports and related authorization artifacts.</li>
<li>Coordinate with ISSOs, system owners, engineers, and authorization stakeholders to resolve control assessment questions and evidence gaps.</li>
</ul><h3 class="jobSectionHeader"><b>RMF, ATO, and Authorization Support</b></h3>
<ul><li>Support RMF lifecycle activities for ATO maintenance, rapid ATOs, reauthorization, ongoing authorization, and continuous monitoring.</li>
<li>Review authorization package content, including SSPP/SSP, SAR, POA&amp;M, residual risk reports, risk analysis reports, threat matrix reports, and executive briefings.</li>
<li>Use JCAM or similar authorization management systems to review control implementation data, assessment records, evidence, and authorization status.</li>
<li>Support AO and stakeholder decision-making by providing clear assessment findings and risk-based recommendations.</li>
</ul><h3 class="jobSectionHeader"><b>Classified, Unclassified, and NSS Security Assessment Support</b></h3>
<ul><li>Apply specialized cybersecurity assessment expertise across classified programs, unclassified programs, National Security Systems, and sensitive federal environments as assigned.</li>
<li>Evaluate system boundaries, security categorization, control applicability, inherited controls, hybrid controls, and assessment scope to support accurate authorization decisions.</li>
<li>Assess live networks, system components, cloud or hybrid environments, and enterprise services to determine security posture and compliance readiness.</li>
<li>Ensure assessment work reflects the operational environment, mission use, technical architecture, and applicable federal security requirements.</li>
</ul><h3 class="jobSectionHeader"><b>Risk, Vulnerability, and POA&amp;M Analysis</b></h3>
<ul><li>Analyze control weaknesses, vulnerabilities, audit findings, and technical deficiencies to determine severity, risk impact, and recommended remediation approach.</li>
<li>Support POA&amp;M creation, review, validation, tracking, and closure by ensuring weaknesses are clearly documented and tied to corrective actions.</li>
<li>Review remediation evidence and updated assessment results to determine whether findings can be reduced, closed, or escalated for risk acceptance consideration.</li>
<li>Coordinate with vulnerability management, incident response, configuration management, and O&amp;M teams to align findings with operational remediation activities.</li>
</ul><h3 class="jobSectionHeader"><b>Reporting, Documentation, and Stakeholder Coordination</b></h3>
<ul><li>Prepare written communications, assessment summaries, status updates, findings reports, and briefing materials for government and contractor leadership.</li>
<li>Support monthly reporting by documenting assessment progress, deliverables, risks, issues, corrective actions, and key authorization activities.</li>
<li>Maintain audit-ready documentation that meets SOW requirements for content, completeness, accuracy, and conformance.</li>
<li>Communicate technical assessment results in clear language for system owners, CORs, AOs, privacy stakeholders, and program leadership.</li>
</ul><h2 class="jobSectionHeader"><b>IV. Qualifications</b></h2>
<h3 class="jobSectionHeader"><b>Education</b></h3>
<ul><li>Bachelor&rsquo;s degree required.</li>
<li>Degree in cybersecurity, information systems, computer science, information technology, management information systems, or a related discipline preferred.</li>
</ul><h3 class="jobSectionHeader"><b>Professional Certifications</b></h3>
<p>Candidate must possess at least one of the following required certifications:</p>
<ul><li>CISA &ndash; Certified Information Systems Auditor.</li>
<li>CRISC &ndash; Certified in Risk and Information Systems Control.</li>
<li>CISSP &ndash; Certified Information Systems Security Professional.</li>
<li>CGRC &ndash; Certified in Governance, Risk and Compliance.</li>
</ul><h3 class="jobSectionHeader"><b>Minimum Qualifications</b></h3>
<ul><li>Minimum of eight (8) years of cybersecurity expertise.</li>
<li>Minimum of five (5) years of specialized experience supporting classified and unclassified programs, National Security Systems, and NIST SP 800-53A security control assessment activities.</li>
<li>Experience performing security control assessments, validating assessment evidence, documenting findings, and supporting authorization decisions for federal information systems.</li>
<li>Experience supporting RMF, ATO maintenance, control assessment, risk analysis, POA&amp;M management, and continuous monitoring activities.</li>
<li>Ability to coordinate with system owners, ISSOs, engineers, assessors, authorizing officials, privacy stakeholders, CORs, and program leadership.</li>
<li>Public Trust / Suitability required; must be able to obtain and maintain required access for the duration of the assignment.</li>
</ul><h3 class="jobSectionHeader"><b>Preferred Qualifications</b></h3>
<ul><li>Strong working knowledge of NIST Special Publications, including NIST SP 800-53A assessment procedures, NIST SP 800-53 security controls, and NIST SP 800-37 RMF/security authorization.</li>
<li>Experience using DOJ JCAM or similar governance, risk, and compliance systems to review authorization artifacts, assessment evidence, and authorization status.</li>
<li>Prior DOJ, BOP, DoD, Intelligence Community, or federal law enforcement cybersecurity assessment experience.</li>
<li>Experience assessing controls for on-premises, cloud, hybrid, air-gapped, or classified federal systems.</li>
<li>Strong written communication skills with the ability to produce audit-ready assessment documentation and executive-level risk summaries.</li>
</ul></div><div><div><div><div><b>Job Category: </b>Analyst Cybersecurity Security
</div><div><b>Job Type: </b>Full Time
</div><div><b>Job Location: </b>Washington DC
</div><div><b>Education: </b>Bachelor's Degree
</div><div><b>Clearance: </b>Public Trust Clearance</div></div></div></div></div>

Security Control Assessor/Analyst (Cybersecurity Analyst III)

<div><div><p><b>New</b>
<br>
Posted: May 18, 2026</p>
<p><i>This role is contingent upon award</i></p>
<h2 class="jobSectionHeader"><b>I. Program Overview</b></h2>
<h3 class="jobSectionHeader"><b>Program Description</b></h3>
<p>The IT CSSS program provides information security support to the Federal Bureau of Prisons Information Technology &amp; Data Division and other DOJ components as required. The program supports BOP obligations to protect federal information systems under FISMA, OMB Circular A-130, the Privacy Act, NIST RMF guidance, DOJ policy, and related cybersecurity requirements.</p>
<h3 class="jobSectionHeader"><b>Program Scope</b></h3>
<p>The program covers ATO maintenance and rapid ATO activities, RMF lifecycle support, JCAM-based authorization management, FISMA/FISCAM audit support, security architecture and engineering support, vulnerability and risk management, privacy documentation, FedRAMP assessment support, continuous monitoring, and coordination with BOP system owners, CORs, AOs, and technical stakeholders.</p>
<h2 class="jobSectionHeader"><b>II. Position Overview</b></h2>
<p>The Senior ATO Subject Matter Expert supports BOP and DOJ cybersecurity authorization activities by leading system security assessments, preparing authorization documentation, and advising on security upgrades, policy alignment, and risk-based authorization decisions. The role supports live networks, desktop systems, servers, enterprise databases, cloud, hybrid, and classified environments as required, ensuring security A&amp;A and ATO activities are accurate, compliant, and aligned to federal and DOJ requirements.</p>
<h3 class="jobSectionHeader"><b>Work Environment</b></h3>
<ul><li>Work Location: BOP Central Office, Washington, DC; in-office required, telework as approved</li>
<li>Security Clearance: Public Trust / Suitability</li>
</ul><h2 class="jobSectionHeader"><b>III. Key Responsibilities</b></h2>
<h3 class="jobSectionHeader"><b>ATO and Authorization Lifecycle Leadership</b></h3>
<ul><li>Lead security A&amp;A and ATO activities for information systems across live networks, desktop systems, servers, enterprise databases, and classified or sensitive environments as assigned.</li>
<li>Develop, maintain, and assess authorization packages that support successful certification and accreditation, security authorization, reauthorization, and ongoing authorization decisions.</li>
<li>Apply NIST SP 800-37 RMF processes and DOJ/BOP authorization procedures to support prepare, categorize, select, implement, assess, authorize, and monitor activities.</li>
<li>Use JCAM or similar authorization management systems to document system information, control baselines, authorization evidence, risk decisions, and approval status.</li>
</ul><h3 class="jobSectionHeader"><b>System Security Assessment and Documentation</b></h3>
<ul><li>Perform system security assessments and prepare assessment-ready documentation for security controls, implementation status, technical evidence, and identified weaknesses.</li>
<li>Prepare, review, and update SSPP/SSP, SAR, POA&amp;M, residual risk, risk analysis, threat matrix, authorization memo, and executive briefing artifacts.</li>
<li>Assess system boundaries, information types, categorization decisions, control implementation details, and supporting evidence for accuracy and completeness.</li>
<li>Coordinate updates to incident response, contingency planning, configuration management, privacy, MOU/ISA, and other RMF-related documentation as required.</li>
</ul><h3 class="jobSectionHeader"><b>Security Policy, Compliance, and Risk Advisory</b></h3>
<ul><li>Assess and enhance IT security policies and procedures in response to federal, DOJ, BOP, and international regulatory requirements as applicable.</li>
<li>Apply strong working knowledge of NIST Special Publications, NIST SP 800-53 security control selection, and federal cybersecurity requirements to improve authorization readiness.</li>
<li>Analyze security findings, vulnerabilities, policy gaps, and control deficiencies to determine risk impact and recommend corrective actions or risk response options.</li>
<li>Support risk-based decision-making by translating security assessment results into clear recommendations for system owners, AOs, CORs, and program leadership.</li>
</ul><h3 class="jobSectionHeader"><b>Security Upgrades and Technical Coordination</b></h3>
<ul><li>Coordinate with system owners, operations and maintenance teams, engineers, and assessors to support security upgrades and remediation activities for operational systems.</li>
<li>Review proposed system and environment changes to determine potential security or privacy impact and required updates to authorization artifacts.</li>
<li>Support vulnerability remediation, control implementation validation, and technical evidence collection across on-premises, cloud, hybrid, and air-gapped environments.</li>
<li>Ensure security documentation reflects the as-implemented state of systems and remains current as technologies, configurations, and mission requirements evolve.</li>
</ul><h3 class="jobSectionHeader"><b>Reporting, Stakeholder Engagement, and Quality Control</b></h3>
<ul><li>Prepare written communications, status updates, briefings, risk summaries, and authorization decision support materials for government and contractor leadership.</li>
<li>Support monthly reporting by documenting deliverables, risks, issues, corrective actions, authorization milestones, and system security posture.</li>
<li>Coordinate with BOP system owners, CORs, AOs, privacy stakeholders, assessors, and technical teams to resolve documentation gaps and authorization risks.</li>
<li>Maintain high-quality, audit-ready artifacts that meet SOW requirements for content, completeness, accuracy, and conformance.</li>
</ul><h2 class="jobSectionHeader"><b>IV. Qualifications</b></h2>
<h3 class="jobSectionHeader"><b>Education</b></h3>
<ul><li>Bachelor&rsquo;s degree required.</li>
<li>Degree in cybersecurity, information systems, computer science, information technology, management information systems, or a STEM related discipline preferred.</li>
</ul><h3 class="jobSectionHeader"><b>Professional Certifications</b></h3>
<p>Candidate must possess at least one of the following required certifications:</p>
<ul><li>CISA &ndash; Certified Information Systems Auditor.</li>
<li>CRISC &ndash; Certified in Risk and Information Systems Control.</li>
<li>CISSP &ndash; Certified Information Systems Security Professional.</li>
<li>CAP &ndash; Certified Authorization Professional.</li>
</ul><h3 class="jobSectionHeader"><b>Minimum Qualifications</b></h3>
<ul><li>Minimum of seven (7) years of experience performing systems security assessments, preparing system security documentation, and/or performing security upgrades for live networks, desktop systems, servers, and enterprise databases leading to successful certification and accreditation or security authorization.</li>
<li>Minimum of seven (7) years of experience assessing and enhancing IT systems security policies and procedures in response to regulatory requirements associated with federal and international standards.</li>
<li>Minimum of seven (7) years of IT security experience with extensive knowledge of security regulations and security assessments, including experience developing security A&amp;A and ATO packages for a range of systems, including classified systems.</li>
<li>Experience supporting RMF, ATO maintenance, security authorization documentation, control assessment, risk analysis, POA&amp;M management, and ongoing authorization activities.</li>
<li>Ability to coordinate with system owners, technical teams, assessors, authorizing officials, privacy stakeholders, CORs, and program leadership.</li>
<li>Public Trust / Suitability required; must be able to obtain and maintain required access for the duration of the assignment.</li>
</ul><h3 class="jobSectionHeader"><b>Preferred Qualifications</b></h3>
<ul><li>Strong working knowledge of NIST Special Publications, including NIST SP 800-53 for security control selection and NIST SP 800-37 for RMF/security authorization.</li>
<li>Experience using DOJ JCAM or similar governance, risk, and compliance systems to manage authorization artifacts, evidence, and authorization status.</li>
<li>Prior DOJ, BOP, or federal law enforcement cybersecurity support experience.</li>
<li>Experience supporting on-premises, cloud, hybrid, air-gapped, or classified federal systems.</li>
<li>Strong written communication skills with the ability to produce audit-ready cybersecurity documentation and executive-level risk summaries.</li>
</ul></div><div><div><div><div><b>Job Category: </b>Analyst Cybersecurity Security SME
</div><div><b>Job Type: </b>Full Time
</div><div><b>Job Location: </b>Washington DC
</div><div><b>Education: </b>Bachelor's Degree
</div><div><b>Clearance: </b>Public Trust Clearance</div></div></div></div></div>

Senior ATO Subject Matter Expert Cybersecurity Analyst III

<div><div><p><b>New</b>
<br>
Posted: May 18, 2026</p>
<p><i>This role is contingent upon award</i></p>
<h2 class="jobSectionHeader"><b>I. Program Overview</b></h2>
<h3 class="jobSectionHeader"><b>Program Description</b></h3>
<p>The IT CSSS program provides information security support to the Federal Bureau of Prisons Information Technology &amp; Data Division and other DOJ components as required. The program supports BOP obligations to protect federal information systems under FISMA, OMB Circular A-130, the Privacy Act, NIST RMF guidance, DOJ policy, and related cybersecurity requirements.</p>
<h3 class="jobSectionHeader"><b>Program Scope</b></h3>
<p>The program covers ATO maintenance and rapid ATO activities, RMF lifecycle support, JCAM-based authorization management, FISMA/FISCAM audit support, security architecture and engineering support, vulnerability and risk management, privacy documentation, FedRAMP assessment support, continuous monitoring, and coordination with BOP system owners, CORs, AOs, and technical stakeholders.</p>
<h2 class="jobSectionHeader"><b>II. Position Overview</b></h2>
<p>The Senior ISSO supports BOP and DOJ cybersecurity authorization, compliance, and continuous monitoring activities for federal information systems. The role develops, maintains, and assesses SA&amp;A packages; supports ATO maintenance and rapid ATO efforts; coordinates with system owners, assessors, technical teams, and government stakeholders; and ensures cybersecurity documentation, risk decisions, and control evidence remain accurate, defensible, and aligned to federal requirements.</p>
<h3 class="jobSectionHeader"><b>Work Environment</b></h3>
<ul><li>Work Location: BOP Central Office, Washington, DC; in-office required, telework as approved</li>
<li>Security Clearance: Public Trust / Suitability</li>
</ul><h2 class="jobSectionHeader"><b>III. Key Responsibilities</b></h2>
<h3 class="jobSectionHeader"><b>RMF and ATO Lifecycle Support</b></h3>
<ul><li>Develop, maintain, and assess SA&amp;A packages supporting ATO, re-ATO, ongoing authorization, and rapid authorization activities for BOP information systems.</li>
<li>Support RMF preparation, categorization, control selection, implementation, assessment, authorization, and continuous monitoring in accordance with DOJ and BOP requirements.</li>
<li>Use JCAM and government processes to document system registration, categorization, control baselines, authorization status, and required ATO artifacts.</li>
<li>Assemble authorization packages, including SSPP/SSP artifacts, SARs, POA&amp;Ms, residual risk reports, risk analysis reports, executive briefings, and authorization documentation.</li>
</ul><h3 class="jobSectionHeader"><b>Security Control Assessment and Documentation</b></h3>
<ul><li>Develop and maintain assessment plans, control documentation, implementation statements, test evidence, and assessment results.</li>
<li>Assess security and privacy controls against NIST SP 800-53, DOJ Cybersecurity Standards, BOP policy, and applicable federal guidance.</li>
<li>Identify documentation gaps, validate evidence, and coordinate corrective actions with system owners, engineers, assessors, and government stakeholders.</li>
<li>Update SSPP/SSP, SAR, POA&amp;M, contingency plan, incident response plan, configuration management plan, privacy, and supporting artifacts as system conditions change.</li>
</ul><h3 class="jobSectionHeader"><b>Risk, POA&amp;M, and Continuous Monitoring</b></h3>
<ul><li>Track and report cybersecurity risks, vulnerabilities, weaknesses, and remediation activities through POA&amp;M closure, risk acceptance, or corrective action.</li>
<li>Support ongoing authorization by monitoring system and environment changes, initiating security and privacy impact analysis, and updating artifacts as required.</li>
<li>Prepare security and privacy status reporting on system security posture, major risks, vulnerability status, POA&amp;M progress, and key authorization activities.</li>
<li>Coordinate with vulnerability management, SIEM, compliance, configuration management, and technical teams to collect evidence and support near real-time risk management.</li>
</ul><h3 class="jobSectionHeader"><b>Stakeholder Coordination and Reporting</b></h3>
<ul><li>Coordinate with BOP system owners, CORs, AOs, SCOP/privacy officials, assessors, technical teams, and contractor leadership to resolve authorization risks.</li>
<li>Prepare cybersecurity briefings, risk summaries, status updates, and decision support materials for government stakeholders and program leadership.</li>
<li>Support monthly status reporting by documenting completed activities, deliverables, risks, issues, corrective actions, and staffing or performance considerations.</li>
<li>Provide senior-level cybersecurity guidance regarding SA&amp;A readiness, ATO package quality, risk communication, and compliance expectations.</li>
</ul><h2 class="jobSectionHeader"><b>IV. Qualifications</b></h2>
<h3 class="jobSectionHeader"><b>Education</b></h3>
<ul><li>Bachelor&rsquo;s degree required.</li>
<li>Degree in cybersecurity, information systems, computer science, information technology, management information systems, or a related discipline preferred.</li>
</ul><h3 class="jobSectionHeader"><b>Professional Certifications</b></h3>
<p>Candidate must possess at least one of the following required certifications:</p>
<ul><li>CISA &ndash; Certified Information Systems Auditor.</li>
<li>CRISC &ndash; Certified in Risk and Information Systems Control.</li>
<li>CISSP &ndash; Certified Information Systems Security Professional.</li>
<li>CGRC &ndash; Certified in Governance, Risk and Compliance.</li>
</ul><h3 class="jobSectionHeader"><b>Minimum Qualifications</b></h3>
<ul><li>Minimum of seven (7) years of cybersecurity experience.</li>
<li>Minimum of six (6) years developing, maintaining, and assessing SA&amp;A packages resulting in an ATO for IT systems.</li>
<li>Experience supporting RMF, ATO maintenance, continuous monitoring, POA&amp;M management, control assessment, and security authorization documentation.</li>
<li>Experience preparing or maintaining SSP/SSPP, SAR, POA&amp;M, risk assessment, residual risk, incident response, contingency planning, configuration management, privacy, and authorization package artifacts.</li>
<li>Ability to coordinate with system owners, technical teams, assessors, authorizing officials, privacy stakeholders, CORs, and program leadership.</li>
<li>Public Trust / Suitability required; must be able to obtain and maintain required access for the duration of assignment.</li>
</ul><h3 class="jobSectionHeader"><b>Preferred Qualifications</b></h3>
<ul><li>Prior DOJ, BOP, or federal law enforcement cybersecurity support experience.</li>
<li>Experience using DOJ JCAM or similar governance, risk, and compliance systems to manage authorization artifacts and evidence.</li>
<li>Working knowledge of NIST SP 800-37, NIST SP 800-53, FISMA, FISCAM, OMB Circular A-130, Privacy Act requirements, DOJ cybersecurity policy, and FedRAMP concepts.</li>
<li>Experience supporting on-premises, cloud, hybrid, or air-gapped federal systems.</li>
<li>Strong written communication skills with the ability to produce audit-ready cybersecurity documentation and executive-level risk summaries.</li>
</ul></div><div><div><div><div><b>Job Category: </b>Analyst Cybersecurity Security
</div><div><b>Job Type: </b>Full Time
</div><div><b>Job Location: </b>Washington DC
</div><div><b>Education: </b>Bachelor's Degree
</div><div><b>Clearance: </b>Public Trust Clearance</div></div></div></div></div>

Senior Information System Security Officer (ISSO) (Cybersecurity Analyst III)

Cayuse Holdings

<div><p>The Cyber Incident Response Analyst role is pivotal in reinforcing the client&rsquo;s cybersecurity framework by serving as the primary entry point for all external communications regarding cybersecurity incidents and related information requests. Operating within the client&rsquo;s 24x7 Operations Center, the Analyst will engage in case management, triage, and operational coordination of cybersecurity incidents.</p><p></p><p><br>
This position aligns with Cayuse&rsquo;s core values of Innovation, Excellence, Collaboration, Adaptability, and Integrity by fostering technical solutions that meet customer needs, promoting teamwork, and prioritizing quality in deliverables.</p><br>
<ul><li>
Provide first-line support for incidents and technical issues reported by client&rsquo;s staff and customers.</li><li>
Categorize and escalate incidents according to severity and ensure compliance with Standard Operating Procedures (SOPs).</li><li>
Escalate cases to specialized teams (e.g., Threat Hunting, Vulnerability Management) where applicable.</li><li>
Serve as the point of contact to coordinate with regional teams, private-sector entities, and partners to ensure full incident lifecycle execution.</li><li>
Track and verify the distribution and resolution of service requests, while certifying effective communication between stakeholders.</li><li>
Maintain active oversight of shared mailboxes, incoming incident reports, and phone systems to ensure efficient case routing and response.</li><li>
Perform correlation analysis across cyber, physical, and communication threats to enhance situational awareness.</li><li>
Support senior leadership by contributing to daily, weekly, and monthly reports, outlining emerging threat patterns and operational metrics.</li><li>
Deliver exceptional customer service and technical support to the client&rsquo;s partners during incident responses.</li><li>
Participate in shift synchronization meetings to ensure seamless 24/7 Operations Center transitions.</li><li>
Other duties as assigned.</li></ul><br>
<ul><li>
Bachelor&rsquo;s degree in a related discipline such as Homeland Security or Business, or a combination of education, technical training and equivalent experience.</li><li>
CompTIA Security+ CE Certification: Demonstrates foundational knowledge in cybersecurity principles, risk management, and network security.</li><li>
ITIL v4/v5 Certification: Proficient in IT service management best practices, including service lifecycle, continual improvement, and aligning IT services with business needs.</li><li>
Demonstrated experience in delivering high-quality customer service, with a strong understanding of support workflows and client engagement best practices.</li><li>
Additional (2) two years of experience may be substituted with an Associate&rsquo;s degree.</li><li>
Additional (4) four years of military and/or operations environment experience may be substituted with a high school diploma.</li><li>
Must have between zero (0) and two (2) years of related experience.</li><li>
Some travel may be required to Continuity of Operations sites.</li><li>
Due to the nature of work at the client&rsquo;s facility, U.S. Citizen is required.</li><li>
Ability obtain and maintain Top Secret/SCI security clearance and DHS Fitness.</li><li>
Must be able to work varying hours 8-12 hours depending on needs to support 24/7/365 operations.</li><li>
Must be able to pass a background check. May require additional background checks as required by projects and/or clients at any time during employment.</li></ul><p><b>
Minimum Skills:</b></p><ul><li>
Minimum 2 years working directly with customer and service desk functions for WATCH Operations Center or Security Operations Center (SOC).</li><li>
Skilled in utilizing Amazon Connect for managing customer interactions and contact flows.</li><li>
Demonstrated knowledge and understanding of customer service techniques, demonstrated experience providing service desk or call center support.</li><li>
Exceptional communication skills and ability to stay calm in high stress events while maintaining good decision making, focus, and good prioritization skills.</li><li>
Experience working with a Service Desk platform such as ServiceNOW or Remedy.</li><li>
Ability and willingness to learn new tools and technologies and take on new responsibilities as assigned.</li><li>
Experience working with ServiceNOW and another alternative platform such as Remedy.</li><li>
High proficiency in Microsoft Office; including but not limited to: Word, Excel, PowerPoint, and other general software applications.</li></ul><p><b>
Our Commitment to you / overview of benefits
</b></p><ul><li>Medical, Dental and Vision Insurance; Wellness Program</li><li>
Flexible Spending Accounts (Healthcare, Dependent Care, Commuter)</li><li>
Short-Term and Long-Term Disability options</li><li>
Basic Life and AD&amp;D Insurance (Company Provided)</li><li>
Voluntary Life and AD&amp;D options</li><li>
401(k) Retirement Savings Plan with matching after one year</li><li>
Paid Time Off</li></ul><p><b>
Reports to: Program Manager</b></p><p></p><p><b><br>
Working Conditions
</b></p><ul><li>Professional office environment.</li><li>
Must be able to work varying hours 8-12 hours depending on needs to support 24/7/365 operations.</li><li>
Must be physically and mentally able to perform duties extended periods of time.</li><li>
Ability to use a computer and other office productivity tools with sufficient speed to meet the demands of this position.</li><li>
Must be able to establish a productive and professional workspace.</li><li>
Must be able to sit for long periods of time looking at computer screen.</li><li>
May be asked to work a flexible schedule which may include holidays.</li><li>
May be asked to travel for business or professional development purposes.</li><li>
May be asked to work hours outside of normal business hours.</li></ul><p><b>
Other Duties: </b><i>Please note this job description is not designed to cover or contain a comprehensive list of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.</i></p><p><b><i>
Cayuse is an Equal Opportunity Employer. All employment decisions are based on merit, qualifications, skills, and abilities. All qualified applicants will receive consideration for employment in accordance with any applicable federal, state, or local law.</i></b></p></div>

Cyber Incident Response Analyst- Junior

cFocus Software Incorporated

<div><h1 class="jobSectionHeader"><b>Business Process Reengineering Specialist Job Description</b></h1><b>
Position Title: </b>Business Process Reengineering Specialist<br>
<b>Program: </b>SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader"><b>
Position Summary</b></h2>
The Business Process Reengineering (BPR) Specialist supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by leading business process analysis, optimization, transformation, and modernization efforts supporting enterprise cybersecurity operations, engineering, and governance functions.<br>
The Business Process Reengineering Specialist serves as a senior-level functional and operational lead responsible for evaluating existing cybersecurity business processes, identifying operational inefficiencies, developing optimized workflows, and implementing continuous process improvement initiatives aligned with federal cybersecurity mandates, Zero Trust Architecture (ZTA), cybersecurity modernization initiatives, and SBA mission objectives.<h2 class="jobSectionHeader"><b>
Essential Duties and Responsibilities</b></h2><ul><li>
Provide senior-level business process reengineering support for the SBA ECS cybersecurity program.</li><li>
Support Task Areas 3.5.4 and 3.5.4.3 by analyzing, redesigning, documenting, and optimizing cybersecurity operational processes and enterprise workflows.</li><li>
Conduct current-state and future-state business process assessments across cybersecurity operations, governance, compliance, incident response, vulnerability management, and engineering functions.</li><li>
Facilitate process improvement workshops, stakeholder interviews, requirements gathering sessions, and operational assessments.</li><li>
Develop business process models, swim lane diagrams, workflow diagrams, process maps, standard operating procedures (SOPs), and operational playbooks.</li><li>
Identify opportunities for process automation, orchestration, and workflow optimization utilizing modern cybersecurity tools and technologies.</li><li>
Support implementation of cybersecurity modernization initiatives supporting Zero Trust Architecture, cloud transformation, and enterprise cybersecurity engineering.</li><li>
Collaborate with cybersecurity architects, engineers, SOC analysts, ISSOs, ISSMs, and program managers to align business processes with enterprise security objectives.</li><li>
Analyze cybersecurity operational metrics, performance indicators, process bottlenecks, and service delivery challenges to recommend improvements.</li><li>
Develop and implement governance processes supporting RMF, FISMA, FedRAMP, NIST, CISA directives, and SBA cybersecurity compliance requirements.</li><li>
Support organizational change management activities associated with cybersecurity transformation and process modernization efforts.</li><li>
Develop recommendations to improve operational efficiency, reduce cybersecurity risk, streamline service delivery, and enhance mission performance.</li><li>
Assist with development of integrated master schedules, project plans, transition plans, and operational implementation strategies.</li><li>
Support cybersecurity program management activities including reporting, process governance, risk tracking, and stakeholder communications.</li><li>
Develop executive briefings, status reports, business cases, gap analyses, and strategic recommendations for senior leadership.</li><li>
Provide task management and coordination support across cross-functional cybersecurity teams and stakeholders.</li><li>
Monitor process improvement initiatives to ensure successful implementation and measurable operational outcomes.</li><li>
Support continuous process improvement initiatives using Lean, Agile, ITIL, Six Sigma, and industry best practices where applicable.</li><li>
Ensure cybersecurity operational processes align with SBA mission requirements, federal guidance, and enterprise governance standards.</li></ul><h2 class="jobSectionHeader"><b>
Minimum Qualifications</b></h2><ul><li>
Bachelor&rsquo;s degree in Business Administration, Information Systems, Cybersecurity, Information Technology, Organizational Development, Engineering, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 8 years of experience supporting business process improvement, cybersecurity operations, IT program management, or federal modernization initiatives.</li><li>
Demonstrated experience conducting business process reengineering, workflow optimization, and organizational transformation activities.</li><li>
Experience supporting cybersecurity operations, enterprise IT modernization, governance, or federal cybersecurity programs.</li><li>
Strong understanding of federal cybersecurity requirements including NIST, RMF, FISMA, FedRAMP, and Zero Trust initiatives.</li><li>
Experience developing process maps, workflow documentation, SOPs, governance documentation, and operational procedures.</li><li>
Knowledge of cybersecurity operations, SOC workflows, incident response, vulnerability management, and enterprise security operations.</li><li>
Experience facilitating stakeholder meetings, requirements sessions, workshops, and executive briefings.</li><li>
Strong analytical, organizational, communication, and technical writing skills.</li><li>
Ability to coordinate cross-functional teams and manage multiple priorities in a dynamic operational environment.</li><li>
Experience supporting Agile, ITIL, Lean Six Sigma, or continuous improvement methodologies preferred.</li></ul><h2 class="jobSectionHeader"><b>
Preferred Certifications</b></h2><ul><li>
Project Management Professional (PMP)</li><li>
Certified Business Analysis Professional (CBAP)</li><li>
Lean Six Sigma Green Belt or Black Belt</li><li>
ITIL Foundation or ITIL Managing Professional</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
Certified Information Security Manager (CISM)</li><li>
SAFe Agile Certification</li><li>
Certified Scrum Master (CSM)</li></ul><br>
<p>
</p><p>dRFXzzS6H2</p></div>

Business Process Reengineering Specialist

Koniag Government Services

Koniag Data Solutions, LLC, a Koniag Government Services company, is seeking a Technical Program Manager to support KDS and our government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust.
<br>We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.
<br>Koniag Data Solutions,LLC, a Koniag Government Services company, is seeking an experienced Technical Program Manager with a strong cybersecurity background to lead complex technical programs and initiatives. The ideal candidate will possess a PMP certification and demonstrate exceptional program management capabilities combined with deep technical expertise in cybersecurity domains. This role requires the ability to bridge technical and business stakeholders, manage multiple concurrent programs, and drive successful outcomes in dynamic environments. Ability to obtain and maintain required security clearances to support our government customers.
<br>The Technical Program Manager will lead the planning, execution, and delivery of complex technical programs with a focus on cybersecurity initiatives. This individual will serve as the primary point of contact for program stakeholders, coordinate cross-functional teams, and ensure successful program outcomes while maintaining adherence to budget, schedule, and quality requirements. Principal responsibilities will include but are not limited to:
<br><ul>
<li>Lead end-to-end program management for multiple concurrent technical programs involving cybersecurity implementations, infrastructure upgrades, and security compliance initiatives.</li>
<li>Develop comprehensive program plans, including scope, schedule, budget, resource allocation, risk management, and quality assurance strategies</li>
<li>Facilitate regular program reviews, status meetings, and executive briefings to communicate program health, risks, and accomplishments</li>
<li>Coordinate with technical leads, security architects, engineers, and other stakeholders to ensure alignment and successful delivery</li>
<li>Manage program budgets, track expenditures, and forecast financial needs across program lifecycles</li>
<li>Identify, assess, and mitigate program risks and issues, escalating critical items to leadership as appropriate</li>
<li>Establish and track key performance indicators (KPIs) and metrics to measure program success and drive continuous improvement</li>
<li>Ensure compliance with cybersecurity frameworks, standards, and regulatory requirements (e.g., NIST, FedRAMP, FISMA, RMF)</li>
<li>Facilitate change management processes and communicate impacts to stakeholders</li>
<li>Lead vendor management activities including coordination, performance monitoring, and contract compliance</li>
<li>Drive Agile and traditional project management methodologies as appropriate for program needs</li>
<li>Mentor junior program managers and team members on best practices in program management and cybersecurity</li>
</ul>
<b>Education and Experience:</b><b>Required:</b><br>
<ul>
<li>Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering, or related technical field from an accredited college or university</li>
<li>Project Management Professional (PMP) certification from PMI</li>
<li>8+ years of technical program or project management experience</li>
<li>5+ years of hands-on experience in cybersecurity domains (e.g., security operations, security architecture, compliance, risk management, or security engineering)</li>
<li>Experience managing programs valued at $5M+ with distributed teams</li>
<li>Active or ability to obtain required security clearance (Secret or higher preferred)</li>
</ul>
<b>Desired:</b><br>
<ul>
<li>Master's degree in related technical or business field</li>
<li>CISSP, CISM, CISA, or other relevant cybersecurity certifications</li>
<li>Certified Scrum Master (CSM) or SAFe Program Consultant certification</li>
<li>Experience with federal government contracts and compliance requirements</li>
<li>ITIL Foundation or higher certification</li>
</ul>
<b>Required Skills and Competencies:</b><br>
<ul>
<li>Demonstrated expertise in Project Management Institute (PMI) methodologies and Project Management Body of Knowledge (PMBOK)</li>
<li>Strong technical understanding of cybersecurity principles, practices, and technologies including network security, application security, cloud security, and identity management</li>
<li>Knowledge of cybersecurity frameworks and standards such as NIST Cybersecurity Framework, NIST 800-53, ISO 27001, and CIS Controls</li>
<li>Experience with federal compliance requirements including FedRAMP, FISMA, and Risk Management Framework (RMF)</li>
<li>Proficiency with program management tools such as Microsoft Project, Smartsheet, JIRA, Confluence, or similar platforms</li>
<li>Excellent stakeholder management and communication skills with ability to translate technical concepts for non-technical audiences</li>
<li>Strong analytical and problem-solving abilities with a data-driven approach to decision making</li>
<li>Proven ability to manage multiple priorities and adapt to changing requirements in fast-paced environments</li>
<li>Experience with Agile/Scrum and Waterfall methodologies</li>
<li>Financial acumen including budget development, forecasting, and earned value management (EVM)</li>
<li>Strong leadership skills with ability to influence without direct authority</li>
<li>Exceptional written and verbal communication skills in English</li>
<li>Ability to work effectively in virtual/distributed team environments</li>
</ul>
<b>Security Requirement:</b><br>
<ul>
<li>This position requires the candidate to be able to obtain a Public Trust.</li>
</ul>
<b>Desired Skills and Competencies:</b><br>
<ul>
<li>Experience leading Zero Trust Architecture implementations or other modern security initiatives</li>
<li>Knowledge of DevSecOps practices and CI/CD pipeline security</li>
<li>Familiarity with cloud platforms (AWS, Azure, GCP) and their security services</li>
<li>Experience with Security Information and Event Management (SIEM) or Security Orchestration, Automation and Response (SOAR) implementations</li>
<li>Understanding of security assessment and authorization processes</li>
<li>Experience managing security incident response programs or security operations center (SOC) initiatives</li>
<li>Background in vulnerability management and penetration testing programs</li>
<li>Experience with identity and access management (IAM) implementations</li>
<li>Knowledge of data protection and privacy regulations (GDPR, CCPA, etc.)</li>
<li>Demonstrated thought leadership through publications, speaking engagements, or community involvement</li>
<li>Experience working in highly regulated industries (government, healthcare, finance)</li>
<li>Six Sigma or Lean certification</li>
</ul>
Our Equal Employment Opportunity Policy
<br>The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristic protected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.
<br><br>
The company is dedicated to seeking all qualified applicants. If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e-mail at accommodations@koniag-gs.com or by calling 703-488-9377 to request accommodations.
<br><br>
Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of Koniag, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery. We ensure long-term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.
<br><br>
Equal Opportunity Employer/Veterans/Disabled. Shareholder Preference in accordance with Public Law 88-352

Technical Cyber Program Manager

Explore 36+ Cybersecurity analyst in Washington this May. Find roles across top companies and apply now to boost your career.