senior cybersecurity analyst

application security engineer Jobs in Washington

application security engineer

armed protective security officer Jobs in Washington

armed protective security officer

customer success program manager – isso services Jobs in Washington

cyber threat intelligence analyst (ts/sci req) Jobs in Washington

information system security officer isso

Harmonia Holdings Group, LLC.

<div><div><p>Harmonia Holdings Group, LLC is an award-winning, rapidly growing federal government contractor committed to providing innovative, high-performing solutions to our government clients and focused on fostering a workplace that encourages growth, initiative, creativity, and employee satisfaction.
</p></div><p><b>Description</b></p>
<p><b>
Title: Information System Security Officer (ISSO)</b></p>
<p><b>
Location: </b>Washington, D.C. (Onsite)</p>
<p><b>
Terms:</b> Full-time</p>
<p><b>
Clearance: Active Top Secret with SCI eligibility</b></p>
<p><b>
Travel: 0%</b></p><br>
<p></p>
<p><b>
Position Description</b></p>
<p>
Harmonia is seeking an experienced <b>Information System Security Officer (ISSO)</b> to support a mission-critical operations environment at the Department of State in Washington, DC. The ISSO will be responsible for ensuring compliance with government security policies and standards while providing oversight of system security, assessing risks, and implementing necessary security controls to safeguard classified systems and data. This position <b>requires an active Top Secret clearance with SCI eligibility </b>and U.S. citizenship.</p>
<p>
Veterans are encouraged to apply.</p>
<p><b>
Responsibilities:</b></p>
<ul>
<li>Implement and maintain security controls in accordance with government regulations, such as NIST 800-53, FISMA, and DoD Risk Management Framework (RMF).</li>
<li>Monitor, evaluate, and maintain the security posture of systems, ensuring compliance with Security Technical Implementation Guides (STIGs) and other relevant security requirements.</li>
<li>Develop and update System Security Plans (SSPs), Risk Assessments, Plan of Action and Milestones (POA&amp;Ms), and other documentation to reflect the current system security state.</li>
<li>Collaborate with system administrators, network engineers, and other IT staff to identify, mitigate, and document risks associated with system vulnerabilities and security threats.</li>
<li>Ensure continuous monitoring of systems by reviewing audit logs, conducting vulnerability scans, and assessing the effectiveness of existing security controls.</li>
<li>Provide support for security assessments and accreditation processes, ensuring that security controls are properly implemented and verified.</li>
<li>Lead security control assessments and assist with audits and inspections from internal and external agencies.</li>
<li>Serve as the point of contact for all system security-related matters and provide guidance to system owners on maintaining compliance with security regulations.</li>
<li>Conduct regular security briefings and training to staff on the importance of maintaining security best practices within the SCIF environment.</li>
<li>Respond to and manage security incidents, coordinating with relevant stakeholders to perform root cause analysis and remediation.</li>
<li>Ensure that systems and networks comply with the Continuous Monitoring Program (CMP) and Incident Response Plan (IRP) for rapid detection and response to security events.</li>
</ul>
<p><b>Required Qualifications</b></p>
<ul>
<li>Active Top Secret clearance with SCI eligibility is required.</li>
<li>5 years hands-on experience with security controls and compliance frameworks (e.g. Risk Management Framework (RMF), NIST, FISMA, etc.), developing and maintaining System Security Plans (SSPs), Plan of Action and Milestones (POA&amp;Ms) and other security documentation.</li>
<li>Strong understanding of Security Technical Implementation Guides (STIGs) and hardening of systems.</li>
<li>Strong experience as an Information System Security Officer (ISSO) or similar role within a SCIF or other highly secure government environments.</li>
<li>Proven ability to implement, manage, and monitor security controls, assess vulnerabilities, and mitigate security risks.</li>
<li>Hands-on experience with vulnerability management tools, SIEM solutions, and continuous monitoring technologies.</li>
<li>Familiarity with security incident response procedures, including root cause analysis and remediation.</li>
<li>Strong analytical and problem-solving skills with attention to detail.</li>
<li>Excellent communication and collaboration skills to work effectively with technical teams and senior leadership.</li>
</ul>
<p><b> </b><b>Desired Qualifications</b></p>
<ul>
<li>Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA).</li>
<li>Experience with classified systems accreditation processes and Continuous Diagnostics and Mitigation (CDM).</li>
<li>Familiarity with security automation tools and processes.</li>
</ul><div><p>
___________________________________________________________________________________________________________</p>
<p>
Here at Harmonia we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day. Some of these recognitions include:
</p><ul><li>Recognized as a Top 20 &quot;Best Place to Work in Virginia&quot;</li>
<li>Recipient of Department of Labor's HireVets Gold Medallion</li>
<li>Great Place to Work Certification for five years running</li>
<li>A Virginia Chamber of Commerce Fantastic 50 company</li>
<li>A Northern Virginia Technology Council Tech 100 company</li>
<li>Inc. 5000 list of fastest growing companies for eleven years</li>
<li>Two-time SBA SBIR Tibbett's Award winner</li>
<li>Virginia Values Veterans (V3) Certification</li>
</ul>
<p>We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Harmonia family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full-time employees a variety of benefits including, but not limited to</p>
<ul>
<li>Traditional and HSA- eligible medical insurance plans</li>
<li>100% employer-paid dental and vision insurance options</li>
<li>100% employer-sponsored STD, LTD, and life insurance</li>
<li>5% 401(k) company matching</li>
<li>Flexible-schedules and teleworking options</li>
<li>Paid holidays and PTO Accrual Plans</li>
<li>Paid Parental Leave</li>
<li>Professional development and career growth opportunities</li>
Team and company-wide events, recognition, and appreciation<li>- and so much more!</li>
</ul>
<p><b>Check out our </b><b>LinkedIn</b><b>, </b><b>Facebook</b><b>, and </b><b>Instagram</b><b> to find out a little more about who we are and if we are the right next step for your career!
</b></p><p><i>Harmonia is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics.</i> <i>Harmonia does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans. To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact </i><i>HR@harmonia.com</i><i>.</i></p></div></div>

Information System Security Officer (ISSO)

Tyto Athene

<div>Description:
<div>
Tyto Athene is searching for a <b>Senior Information System Security Officer (ISSO)</b> to be responsible for the overall handling of information assurance expertise for a large, complex IT infrastructure program in Washington DC. Systems are deployed using a public cloud service provider to deliver advanced capabilities to the Federal government using IaaS, PaaS, and SaaS service models.</div><div></div><div><br>
This role is responsible for researching, generating, and validating security controls that support the customers&rsquo; Risk Management Framework (RMF) and ICD 503 Security Accreditation. Responsibilities include defining, creating, and maintaining Systems Security Plans (SSP) to support Accreditation and Authorization (A&amp;A) reviews and coordinating with customer security organizations as part of a delivery pipeline to achieve Authority to Operate (ATO). Additionally, ISSOs review systems to identify potential security weaknesses, recommend improvements to amend vulnerabilities, and assist with implementing changes and documenting upgrades.</div><div></div><div><b><br>
Responsibilities:</b></div><ul><li>
Developing and updating security authorization packages in accordance with the client&rsquo;s requirement and compliant with FISMA. Core documents that you will be responsible for are the System Security Plan (SSP), Risk Assessment Report, Security Assessment Plan and Report, Contingency Plan, Incident Response Plan (IRP), Standard Operating Procedures (SOP), Plan of Actions and Milestones (POA&amp;M), Remediation Plans, Configuration Management Plan (CMP), etc.</li><li>
Validate that protective measures for physical security are in place to support the system's security requirements</li><li>
Maintain an inventory of hardware and software for the information system</li><li>
Develop, coordinate, test, and train staff on Contingency Plans and Incident Response Plans</li><li>
Manage emerging and defined risks associated with the administration and use of assigned information systems</li><li>
Coordinate with the client's Cybersecurity Unit to achieve and maintain the information systems' compliance and authorization to operate (ATO)</li><li>
Perform risk analyses to determine cost-effective and essential safeguards</li><li>
Support Incident Response and Contingency activities</li><li>
Able to perform security control assessment using NIST 800-53A publication as well as OMB A-130 and OMB A-123 circulars</li><li>
Conduct Independent scans of the application, network, and database (where required)</li><li>
Provide continuous monitoring to enforce client security policy and procedures and create processes that will provide oversight into the following activities for the system owner</li><li>
Coordinate with multiple stakeholders to complete mandatory agency data calls in a timely manner</li></ul>
Qualifications:
<div><b>
Required:</b></div><ul><li>
Bachelor&rsquo;s Degree or equivalent combination of formal education and experience. Bachelor's Degree may be substituted for 8 additional years of relevant experience.</li><li>
Minimum of 10 years of general experience and 8 years of relevant functional experience as an ISSO or Security Controls Analyst.</li><li>
Familiarity with program security responsibilities to include, but not limited to the NIST RMF, audit log reviews, system monitoring, SPAA processes, FISMA requirements, vulnerability &amp; compliance scanning, continuous monitoring activities, security testing and evaluation, and security policies.</li><li>
Understanding of Cloud (Amazon Web Services (AWS) or Azure and FedRAMP is highly desired.</li><li>
Demonstrated an understanding of system administration in understanding permissions, event monitoring, and logging.</li><li>
Thorough understanding and knowledge of FISMA and SA&amp;A process</li><li>
Proficiency in writing technical analysis reports</li><li>
Strong written and oral communication skills</li><li>
Project management (ability to track detailed tasks and ensure timely delivery)</li><li>
Good business acumen</li><li>
Relationship management</li><li>
Ability to work quickly, efficiently and accurately in a dynamic and fluid environment</li></ul><div><b>
Desired:</b></div><ul><li>
Understanding and experience with CSAM or JCAM is a PLUS</li><li>
Balancing security requirements with mission needs</li></ul><div><b>
Clearance:</b></div><ul><li>
Secret Clearance to start</li></ul><div><b>
Location:</b></div><ul><li>
Remote</li></ul>
About Tyto Athene:
<div><b>
Compensation:</b></div><ul><li>
Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $125,000-$135,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.</li></ul><div><b>
Benefits:</b></div><ul><li>
Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.</li></ul><div></div><div><br>
Tyto Athene is a trusted leader in IT services and solutions, delivering mission-focused digital transformation that drives measurable success. Our expertise spans four core technology domains&mdash;Network Modernization, Hybrid Cloud, Cybersecurity, and Enterprise IT&mdash;empowering our clients with cutting-edge solutions tailored to their evolving needs. With over 50 years of experience, Tyto Athene proudly support Defense, Intelligence, Space, National Security, Civilian, Health, and Public Safety clients across the United States and worldwide.</div><div>
</div><div>
At Tyto Athene, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamTyto?</div><div>
</div><div>
Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.</div></div>

Senior Information System Security Officer (ISSO) Support

MANTECH

<div><p><b>MANTECH</b> seeks a motivated, career and customer-oriented <b>Senior Cloud Information System Security Officer (ISSO)</b> to join our team in <b>Washington, D.C., Chantilly, VA or Quantico, VA..</b></p><p></p><p><b>
Responsibilities include, but are not limited to:</b></p><ul><li>
Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of the security configuration, practices, and procedures for each IS</li><li>
Provide liaison support between the system owner and other IS security personnel</li><li>
Ensure that selected security controls are implemented and operating as intended during all phases of the IS lifecycle. Ensure that system security documentation is developed, maintained, reviewed, and updated on a continuous basis</li><li>
Conduct required IS vulnerability scans according to risk assessment parameters. Coordinate system owner concurrence for correction or mitigation actions.</li><li>
Develop Plan of Action and Milestones (POAMs) in response to reported security vulnerabilities. Manage the risks to ISs and other FBI assets by coordinating appropriate correction or mitigation actions, and oversee and track the timely completion of (POAMs)</li><li>
Monitor security controls for FBI ISs to maintain security Authorized to Operate (ATO). Upload all security control evidence to the Governance, Risk, and Compliance (GRC) application to support security control implementation during the monitoring phase</li><li>
Ensure that changes to an FBI IS, its environment, and/or operational needs that may affect the authorization status are reported to the system owner and IS Security Manager (ISSM). Ensure the removal and retirement of ISs being decommissioned in coordination with the system owner, ISSM, and ISSR</li></ul><p></p><p><b>
Minimum Qualifications:</b></p><ul><li>
At least seven years' experience as an Information Systems Security Officer (ISSO) or similar role at a cleared facility</li><li>
At least eight years&rsquo; experience working in the Information Technology sector with a bachelor's degree, 6 years with master's degree, 10 years with associates OR 12 years with high school diploma.</li><li>
Hold at least one of the following certifications: Certified Information Systems Security Professional (CISSP), Global Information Security Professional (GISP), or the CompTIA Advanced Security Practitioner (CASP), Certified Information System Manager (CISM), or Information Assurance Management (IAM) Level II proficiency</li><li>
Hold at least one of the following certifications: AWS Certified Cloud Practitioner, AWS Certified Security &ndash; Specialty, (ISC)2 Certified Cloud Security Professional (CCSP), AWS Certified Solutions Architect &ndash; Associate, AZ-500: Microsoft Certified: Azure Security Engineer Associate, Google - Professional Cloud Security Engineer.</li><li>
Familiarity with the use and operation of security tools including Tenable Nessus and/or Security Center, IBM Guardium, HP Weblnspect, Network Mapper (NMAP), and/or similar applications</li></ul><p></p><p><b>
Preferred Qualification:</b></p><ul><li>
A bachelor's or advanced degree in Computer Science, Cybersecurity, or other cyber discipline</li></ul><p></p><p><b>
Clearance Requirements:</b></p><ul><li>
Must have a current/active Top Secret security clearance and be willing and able to obtain SCI eligibility prior to starting this position.</li><li>
Selected candidate may be required to undergo a Polygraph.</li></ul><p><b><br>
Physical Requirements:</b></p><ul><li>
Must be able to remain in a stationary position 50%</li><li>
Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.</li><li>
Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer</li><li>
Often positions self to maintain computers in the lab, including under the desks and in the server closet</li><li>
Frequently communicates with co-workers, management and customers, which may involve delivering presentations</li><li>
Must be able to exchange accurate information in these situations</li></ul></div><p></p>

Senior Cloud Information System Security Officer

Anavation

<div><div><b>Be Challenged and Make a Difference</b></div>
<div></div>
<div>In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.</div><div></div><div><b><br>
Description of Task to be Performed:</b></div>
<div>
<p>AnaVation is seeking an Information System Security Officer (ISSO) Team Lead to support a key client in Washington DC. This individual will provide expert level guidance and leadership in implementing, maintaining, and enforcing information security policies, standards, and methodologies in accordance with federal regulations and agency requirements. This is a working Team Lead role.</p>
<p><b>
What you will be doing</b></p>
<div>
<ul><li>Directly oversee ISSO team members including technical guidance and training, mentorship, performance management, and day-to-day work assignments</li>
<li>Develop, review, and update system documentation and FISMA-compliant SA&amp;A packages (e.g., SSP, IRP, SOP, POA&amp;Ms, CMP, IPA, PIA, SORN) in accordance with client policies and procedures to obtain/maintain system accreditation (e.g., ATT, ATO, ATU, OA) using established processes</li>
<li>Advise the Authorizing Official (AO) and System Owner (SO) on cybersecurity matters related to assigned information systems across all NIST RMF phases, including system categorization, control baselines, control assessments, document and track weaknesses, and oversee corrective actions.</li>
<li>Serve as a member of the CCB to ensure system security requirements are addressed</li>
<li>Monitor cybersecurity status of information systems throughout the system lifecycle</li>
<li>Establish and regularly review audit trails, providing audit logs upon request</li>
<li>Provide RMF process subject matter expertise across all FISMA-reportable systems</li>
<li>Conduct SCA per NIST 800-53A, OMB A-130, OMB A-123, and client policies and schedules; report control gaps or weaknesses, risk levels, cost-benefit analysis, and impact to the client</li>
<li>Maintain a full inventory of hardware and software for the information system</li>
<li>Develop, coordinate, test, and train staff on Contingency Plans and Incident Response Plans; support Incident Response and DR/COOP activities</li>
<li>Scan applications, networks, and databases; identify vulnerabilities</li>
</ul></div></div><h3 class="jobSectionHeader"><b>Required Qualifications:</b></h3><div><b>
Minimum Qualifications (Education/Certications, Experience, etc):</b></div>
<ul><li>Minimum of ten (10) years of hands-on ISSO experience, including High and Cloud systems</li>
<li>Minimum two (2) active certifications: PMP, CISSP, CISM, CEH, CASP, CCSP, CCSK, or Security+</li>
<li>Minimum two (2) years of hands-on experience with JCAM</li>
</ul>
<p><b>Clearance:</b></p>
<ul>
<li>Active Top Secret clearance with SCI Eligibility</li>
</ul>
<p><b>Other Required Skills &amp; Qualifications:</b></p>
<ul>
<li>In depth understanding of FISMA, NIST RMF, and SA&amp;A processes</li>
<li>Exceptional interpersonal skills to establish and maintain positive working relationships with all stakeholders</li>
<li>Experience with GRC tools such as vulnerability management, vulnerability scanning, endpoint management, data protection, SIEM, and GRC automation platforms</li>
<li>Expert-level command of the English language (oral and written), with experience interacting effectively at the CIO and CISO levels of large organizations</li>
<li>Expert-level organizational skills and ability to keep a multitude of tasks and projects on track at all times and with minimal supervision</li>
</ul><h3 class="jobSectionHeader"><b>Preferred Qualifications:</b></h3><div>
<ul><li>Bachelors Degree or higher</li>
<li>CISSP certification</li>
</ul></div><div><b>Benefits</b></div>
<ul> <li>Generous cost sharing for medical insurance for the employee and dependents</li>
<li> 100% company paid dental insurance for employees and dependents</li>
<li> 100% company paid long-term and short-term disability insurance</li>
<li> 100% company paid vision insurance for employees and dependents</li>
<li> 401k plan with generous match and 100% immediate vesting</li>
<li> Competitive Pay</li>
<li> Generous paid leave and holiday package</li>
<li> Tuition and training reimbursement</li>
<li> Life and AD&amp;D Insurance</li>
</ul><div><b>About AnaVation</b></div>
<div>AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.</div>
<div></div>
<div>If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!</div>
<div></div>
<div>AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.</div></div>

ISSO Team Lead

ASRC Federal

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™
<br><br>
ASRC Agile Decision Sciences (ADS), a subsidiary of ASRC Federal, has a great opportunity for a Cybersecurity Professional to support our NASA program. This role will provide critical security oversight, assessment, and compliance support to ensure the protection and integrity of mission systems.
<br>Responsibilities
<br><ul>
<li>Monitor the health of network system security plans and implementations, ensuring responsiveness to emerging vulnerabilities and threats</li>
<li>Provide subject matter expertise on NASA security tools, including the Continuous Diagnostics and Mitigation (CDM) suite, Enterprise Data Warehouse, and RISCS</li>
<li>Perform Information Systems Security Officer (ISSO) functions to manage and maintain system security plans for NASA SCaN programmatic systems</li>
<li>Support security assessments and oversee activities aligned with CISA, NIST, and NASA guidance</li>
<li>Coordinate vulnerability management efforts, including tracking and remediation support</li>
<li>Collaborate with stakeholders to ensure compliance with federal and NASA cybersecurity requirements</li>
<li>Support scheduling, execution, and documentation of security assessments</li>
</ul>
Required Skills & Experience
<br><ul>
<li>Technical expertise in NASA and/or Federal security documentation, management, integration, and lifecycle management</li>
<li>Experience conducting or supporting security assessments and authorization processes (e.g., RMF)</li>
<li>Strong knowledge of NIST, CISA, and federal cybersecurity standards and frameworks</li>
<li>Familiarity with vulnerability management and remediation processes</li>
<li>Experience with NASA security tools and environments preferred</li>
<li>Active Top Secret (TS) clearance required</li>
</ul>
Education / Experience
<br><ul>
<li>Bachelor’s degree in Cybersecurity, Information Technology, or a related field (or equivalent experience)</li>
<li>5+ years of experience in cybersecurity, information assurance, or related roles</li>
<li>Relevant certifications (e.g., CISSP, Security+, CISM) preferred</li>
</ul>
We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.
<br><br>
EEO Statement
<br>ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.

Senior Cybersecurity Analyst

<div><div><b>Be Challenged and Make a Difference</b></div>
<div></div>
<div>In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.</div><div></div><div><p><b><br>
Description of Task to be Performed:</b></p>
<p>
AnaVation is seeking a Cybersecurity Liaison to support a cabinet-level client in Washington DC. The selected individual(s) will serve as trusted advisors to agency CIOs and CISOs, be experts in cybersecurity and information assurance, and represent the Department in matters of policy, audits, and enterprise security services. Exceptional interpersonal and communication skills are required.</p>
<p><b>
What you will be doing</b></p>
<ul>
<li>Translate and contextualize complex cybersecurity concepts and policies into understandable terms to help agency CIOs, CISOs, and non-technical stakeholders understand how they apply within their organization</li>
<li>Coordinate security initiatives such as IT security audits and the practical application of new or updated policies and Federal mandates at the agency level</li>
<li>Facilitate communication between Department OCIO and agencies to improve security posture</li>
<li>Develop and implement security operating models and procedures tailored to organizational needs</li>
<li>Oversee ISSO SA&amp;A activities to ensure information agency systems become and remain accredited per required schedules (e.g., ATT/ATO); validate that JCAM entries are current and complete</li>
<li>Advise agency personnel regarding Department-level requirements for new systems and decommissioning old systems</li>
<li>Perform risk assessments; maintain information system documentation</li>
</ul></div><h3 class="jobSectionHeader"><b>Required Qualifications:</b></h3><div>
<p><b>
Minimum Qualifications (Education/Certications, Experience, etc):</b></p>
<ul>
<li>Bachelors degree in Information Assurance, Cybersecurity, Information Technology, or related; may be substituted with additional relevant experience</li>
<li>Active CISSP or equivalent high-level cybersecurity certification (e.g., CISM, CEH, CASP)</li>
<li>Minimum six (6) years of hands-on cybersecurity experience such as security engineering, security operations, cloud security, and/or as an ISSO/ISSE/ISSM</li>
<li>Minimum four (4) years supporting a large Federal agency with FISMA, NIST 800-53, RMF, FedRAMP, SA&amp;A, IT security audits, vulnerability and POA&amp;M remediation, executive orders and directives, BODs, and OMB cyber memoranda</li>
<li>Minimum two (2) years of hands-on experience with JCAM</li>
</ul>
<p><b>Clearance:</b></p>
<ul>
<li>Minimum Active Secret clearance, with TS/SCI strongly preferred</li>
</ul>
<p><b>Other Required Skills &amp; Qualifications:</b></p>
<ul>
<li>Exceptional interpersonal skills to establish and maintain positive working relationships with all stakeholders</li>
<li>Expert-level command of the English language (oral and written), with experience interacting effectively at the CIO and CISO levels of large organizations</li>
<li>Expert-level organizational skills and ability to keep a multitude of tasks and projects on track at all times and with minimal supervision</li>
<li>Familiarity with cybersecurity tools such as vulnerability management, vulnerability scanning, endpoint management, data protection, SIEM, and GRC automation platforms</li>
</ul></div><h3 class="jobSectionHeader"><b>Preferred Qualifications:</b></h3><div>
<ul><li>Masters degree</li>
<li>Additional advanced cybersecurity-related certifications</li>
<li>Hands-on, technical cybersecurity experience</li>
<li>Experience leading or actively participating in FISMA, FISCAM, OIG, IRS security audits</li>
</ul></div><div><b>Benefits</b></div>
<ul> <li>Generous cost sharing for medical insurance for the employee and dependents</li>
<li> 100% company paid dental insurance for employees and dependents</li>
<li> 100% company paid long-term and short-term disability insurance</li>
<li> 100% company paid vision insurance for employees and dependents</li>
<li> 401k plan with generous match and 100% immediate vesting</li>
<li> Competitive Pay</li>
<li> Generous paid leave and holiday package</li>
<li> Tuition and training reimbursement</li>
<li> Life and AD&amp;D Insurance</li>
</ul><div><b>About AnaVation</b></div>
<div>AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.</div>
<div></div>
<div>If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!</div>
<div></div>
<div>AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.</div></div>

Cybersecurity Liaison

Gunnison Consulting Group, Inc.

<div>Description:
<p><i>
Salary: $115,000 - $125,000/year</i></p><p>
We are seeking a knowledgeable and detail-oriented Cybersecurity Compliance Subject Matter Expert (SME) to support our Department of State client. This role will support the continued maturation of the customer&rsquo;s cybersecurity program by contributing expert guidance on cyber policy, compliance, risk management, and operational reporting. The ideal candidate combines deep compliance expertise with strong analytical and data visualization skills to support informed decision-making through metrics and dashboards.</p><p><b>
Duties and Responsibilities</b></p><ul><li>
Support the development, interpretation, and implementation of cybersecurity policies and procedures within a secure software development environment, ensuring alignment with applicable security framework series and federal requirements.</li><li>
Serve as a cybersecurity compliance SME for U.S. Government contracting environments, maintaining up-to-date knowledge of relevant regulations, standards, and policies and advising stakeholders on their application.</li><li>
Conduct risk assessments, identify security control gaps and vulnerabilities, and recommend mitigation strategies to strengthen security posture across development and operational environments.</li><li>
Support compliance monitoring activities, including preparation for audits, assessments, and inspections; assist in identifying findings and contributing to remediation planning and documentation.</li><li>
Collaborate with security, engineering, and program stakeholders to support the development and delivery of role-based cybersecurity training (e.g., SO, ISSO, ISSM) and security awareness initiatives.</li><li>
Develop, maintain, and analyze cybersecurity compliance metrics to measure program effectiveness, control performance, and risk trends.</li><li>
Design and produce cybersecurity dashboards and reports using Power BI, Excel, and related tools, translating complex compliance and risk data into clear, actionable visualizations for technical and non-technical audiences.</li><li>
Support continuous process improvement by identifying opportunities to streamline compliance tracking, reporting, and documentation within a dynamic software development environment.</li></ul>
Requirements:
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Systems, Computer Science, or a related field; equivalent relevant experience may be considered in lieu of a degree.</li><li>
Minimum of 8 years of experience in cybersecurity compliance, with demonstrated experience supporting U.S. Government contracting and software development environments.</li><li>
Strong working knowledge of U.S. Government cybersecurity regulations and standards, including NIST, FISMA, FedRAMP, DFARS, and related frameworks.</li><li>
Experience supporting security audits, assessments, or compliance reviews within federal or government-regulated environments.</li><li>
Proven ability to analyze compliance and security data and translate findings into meaningful metrics, reports, and recommendations.</li><li>
Proficiency in Excel (data analysis, pivot tables, charts) and experience designing Power BI dashboards or similar data visualization solutions.</li><li>
Excellent written and verbal communication skills, with the ability to clearly explain cybersecurity risks, compliance requirements, and trends to diverse stakeholders.</li><li>
Detail-oriented and proactive mindset with a strong focus on accuracy, documentation quality, and continuous improvement.</li></ul><p><b>
Desired Qualifications:</b></p><ul><li>
Cybersecurity certifications such as CISSP, CISM, or equivalent.</li><li>
Experience with Department of State FAM/FAH, including integration of requirements into system documentation, processes, and compliance artifacts.</li><li>
Prior experience developing or maintaining executive-level or program-level cybersecurity dashboards.</li><li>
Familiarity with SDLC-related compliance artifacts (SSP, POA&amp;M, RA, CMF documentation, etc.).</li></ul><p><b>
Clearance Requirement</b>: Active Secret clearance required.</p><p><br>
The salary range for this position depends upon multiple factors including location, the individual's knowledge, skills, competencies, and experience, and contract-specific budget constraints and organizational requirements.<br>
Gunnison Consulting Group's total compensation package also includes bonus and profit-sharing opportunities, depending on company and employee performance. Available employee benefits include:</p><ul><li>
3 weeks of Personal Leave your first year</li><li>
11 paid Holidays each year</li><li>
5 days of Flexible Time Off each year</li><li>
401(k) company match at 50% up to 10% of your salary</li><li>
Medical, Dental and Vision Insurance</li><li>
Life and Disability Insurance</li><li>
Public Transportation Subsidies</li><li>
Certifications and Training Allowance - $2,500/year!</li></ul><p><b>
Why Join Gunnison?</b></p><ul><li>
Gunnison takes on ambitious projects. We target fun, challenging work that requires creative thinking and innovation.</li><li>
Quality is our top priority.</li><li>
Gunnison employee benefits meet or exceed what other companies in the Washington, D.C. metropolitan area offer.</li><li>
There is a great sense of camaraderie at Gunnison. This is an atmosphere we will maintain as we continue to grow.</li><li>
We are growing rapidly and the opportunity for individual professional growth with Gunnison is outstanding.</li><li>
We hire for careers at Gunnison, not to fill a position.</li></ul><p>
Equal Opportunity/Affirmative Action Employer. Must be eligible for employment in the United States. We are unable to sponsor candidates at this time.<br>
In 1994 Gunnison began serving the greater Washington, D.C. metro area, focused on tackling our customers' most ambitious technology projects<b>.</b> <b><i>By creating a culture dedicated to enabling our customers and employees to achieve more than they ever thought they could</i></b><b>,</b> the company has thrived for over 25 years.</p></div>

Cybersecurity Compliance SME

Explore 360+ Information system security officer isso in Washington this April. Find roles across top companies and apply now to boost your career.