security control assessor analyst cybersecurity analyst iii

Karthik Consulting

<div><div><p><b>New</b>
<br>
Posted: May 18, 2026</p>
<p><i>This role is contingent upon award</i></p>
<h2 class="jobSectionHeader"><b>I. Program Overview</b></h2>
<h3 class="jobSectionHeader"><b>Program Description</b></h3>
<p>The IT CSSS program provides information security support to the Federal Bureau of Prisons Information Technology &amp; Data Division and other DOJ components as required. The program supports BOP obligations to protect federal information systems under FISMA, OMB Circular A-130, the Privacy Act, NIST RMF guidance, DOJ policy, and related cybersecurity requirements.</p>
<h3 class="jobSectionHeader"><b>Program Scope</b></h3>
<p>The program covers ATO maintenance and rapid ATO activities, RMF lifecycle support, JCAM-based authorization management, FISMA/FISCAM audit support, security architecture and engineering support, vulnerability and risk management, privacy documentation, FedRAMP assessment support, continuous monitoring, and coordination with BOP system owners, CORs, AOs, and technical stakeholders.</p>
<h2 class="jobSectionHeader"><b>II. Position Overview</b></h2>
<p>The Security Control Assessor/Analyst supports BOP and DOJ cybersecurity authorization activities by assessing security controls, validating evidence, analyzing risk, and preparing assessment documentation for classified and unclassified systems, including National Security Systems. This role supports RMF, ATO maintenance, continuous monitoring, and security authorization activities by ensuring assessments are technically sound, properly documented, and aligned with NIST SP 800-53A, DOJ/BOP requirements, and program delivery expectations.</p>
<h3 class="jobSectionHeader"><b>Work Environment</b></h3>
<ul><li>Work Location: BOP Central Office, Washington, DC; in-office required, telework as approved</li>
<li>Security Clearance: Public Trust / Suitability</li>
</ul><h2 class="jobSectionHeader"><b>III. Key Responsibilities</b></h2>
<h3 class="jobSectionHeader"><b>Security Control Assessment</b></h3>
<ul><li>Assess security and privacy controls for classified and unclassified systems, including National Security Systems, in accordance with NIST SP 800-53A, DOJ/BOP requirements, and approved assessment plans.</li>
<li>Validate implementation evidence, test results, artifacts, and technical documentation to determine whether controls are implemented correctly, operating as intended, and producing the desired security outcome.</li>
<li>Document assessment results, findings, deficiencies, recommendations, and risk implications in Security Assessment Reports and related authorization artifacts.</li>
<li>Coordinate with ISSOs, system owners, engineers, and authorization stakeholders to resolve control assessment questions and evidence gaps.</li>
</ul><h3 class="jobSectionHeader"><b>RMF, ATO, and Authorization Support</b></h3>
<ul><li>Support RMF lifecycle activities for ATO maintenance, rapid ATOs, reauthorization, ongoing authorization, and continuous monitoring.</li>
<li>Review authorization package content, including SSPP/SSP, SAR, POA&amp;M, residual risk reports, risk analysis reports, threat matrix reports, and executive briefings.</li>
<li>Use JCAM or similar authorization management systems to review control implementation data, assessment records, evidence, and authorization status.</li>
<li>Support AO and stakeholder decision-making by providing clear assessment findings and risk-based recommendations.</li>
</ul><h3 class="jobSectionHeader"><b>Classified, Unclassified, and NSS Security Assessment Support</b></h3>
<ul><li>Apply specialized cybersecurity assessment expertise across classified programs, unclassified programs, National Security Systems, and sensitive federal environments as assigned.</li>
<li>Evaluate system boundaries, security categorization, control applicability, inherited controls, hybrid controls, and assessment scope to support accurate authorization decisions.</li>
<li>Assess live networks, system components, cloud or hybrid environments, and enterprise services to determine security posture and compliance readiness.</li>
<li>Ensure assessment work reflects the operational environment, mission use, technical architecture, and applicable federal security requirements.</li>
</ul><h3 class="jobSectionHeader"><b>Risk, Vulnerability, and POA&amp;M Analysis</b></h3>
<ul><li>Analyze control weaknesses, vulnerabilities, audit findings, and technical deficiencies to determine severity, risk impact, and recommended remediation approach.</li>
<li>Support POA&amp;M creation, review, validation, tracking, and closure by ensuring weaknesses are clearly documented and tied to corrective actions.</li>
<li>Review remediation evidence and updated assessment results to determine whether findings can be reduced, closed, or escalated for risk acceptance consideration.</li>
<li>Coordinate with vulnerability management, incident response, configuration management, and O&amp;M teams to align findings with operational remediation activities.</li>
</ul><h3 class="jobSectionHeader"><b>Reporting, Documentation, and Stakeholder Coordination</b></h3>
<ul><li>Prepare written communications, assessment summaries, status updates, findings reports, and briefing materials for government and contractor leadership.</li>
<li>Support monthly reporting by documenting assessment progress, deliverables, risks, issues, corrective actions, and key authorization activities.</li>
<li>Maintain audit-ready documentation that meets SOW requirements for content, completeness, accuracy, and conformance.</li>
<li>Communicate technical assessment results in clear language for system owners, CORs, AOs, privacy stakeholders, and program leadership.</li>
</ul><h2 class="jobSectionHeader"><b>IV. Qualifications</b></h2>
<h3 class="jobSectionHeader"><b>Education</b></h3>
<ul><li>Bachelor&rsquo;s degree required.</li>
<li>Degree in cybersecurity, information systems, computer science, information technology, management information systems, or a related discipline preferred.</li>
</ul><h3 class="jobSectionHeader"><b>Professional Certifications</b></h3>
<p>Candidate must possess at least one of the following required certifications:</p>
<ul><li>CISA &ndash; Certified Information Systems Auditor.</li>
<li>CRISC &ndash; Certified in Risk and Information Systems Control.</li>
<li>CISSP &ndash; Certified Information Systems Security Professional.</li>
<li>CGRC &ndash; Certified in Governance, Risk and Compliance.</li>
</ul><h3 class="jobSectionHeader"><b>Minimum Qualifications</b></h3>
<ul><li>Minimum of eight (8) years of cybersecurity expertise.</li>
<li>Minimum of five (5) years of specialized experience supporting classified and unclassified programs, National Security Systems, and NIST SP 800-53A security control assessment activities.</li>
<li>Experience performing security control assessments, validating assessment evidence, documenting findings, and supporting authorization decisions for federal information systems.</li>
<li>Experience supporting RMF, ATO maintenance, control assessment, risk analysis, POA&amp;M management, and continuous monitoring activities.</li>
<li>Ability to coordinate with system owners, ISSOs, engineers, assessors, authorizing officials, privacy stakeholders, CORs, and program leadership.</li>
<li>Public Trust / Suitability required; must be able to obtain and maintain required access for the duration of the assignment.</li>
</ul><h3 class="jobSectionHeader"><b>Preferred Qualifications</b></h3>
<ul><li>Strong working knowledge of NIST Special Publications, including NIST SP 800-53A assessment procedures, NIST SP 800-53 security controls, and NIST SP 800-37 RMF/security authorization.</li>
<li>Experience using DOJ JCAM or similar governance, risk, and compliance systems to review authorization artifacts, assessment evidence, and authorization status.</li>
<li>Prior DOJ, BOP, DoD, Intelligence Community, or federal law enforcement cybersecurity assessment experience.</li>
<li>Experience assessing controls for on-premises, cloud, hybrid, air-gapped, or classified federal systems.</li>
<li>Strong written communication skills with the ability to produce audit-ready assessment documentation and executive-level risk summaries.</li>
</ul></div><div><div><div><div><b>Job Category: </b>Analyst Cybersecurity Security
</div><div><b>Job Type: </b>Full Time
</div><div><b>Job Location: </b>Washington DC
</div><div><b>Education: </b>Bachelor's Degree
</div><div><b>Clearance: </b>Public Trust Clearance</div></div></div></div></div>

Security Control Assessor/Analyst (Cybersecurity Analyst III)

Creative Visions

<div><p><b>Position Overview</b></p>
<p>
Creative Visions is seeking a Security Control Assessor/Analyst to support federal cybersecurity assessment activities for classified and unclassified systems.</p><p></p><p><i><br>
Creative Visions is actively pursuing this federal opportunity. Positions associated with this effort are contingent upon contract award, funding availability, and government approval of proposed personnel. Selected candidates may receive contingent offers of employment pending award and successful completion of applicable clearance and suitability requirements.</i></p><p></p><p><b><br>
Responsibilities</b></p>
<ul>
<li>Perform security control assessments using NIST SP 800-53A methodologies</li>
<li>Develop Security Assessment Reports and related documentation</li>
<li>Conduct compliance and risk assessments</li>
<li>Validate security controls and remediation activities</li>
<li>Support continuous monitoring initiatives</li>
<li>Coordinate with ISSOs and engineering teams</li></ul><br>
<p></p>
<p><b>
Required Qualifications</b></p>
<ul>
<li>8+ years of cybersecurity experience</li>
<li>5+ years supporting classified/unclassified programs</li>
<li>Experience with NIST SP 800-53A assessments</li>
<li>Strong analytical and documentation skills</li></ul><br>
<p></p>
<p><b>
Education &amp; Certifications</b></p>
<ul>
<li>Bachelor&rsquo;s degree <b>REQUIRED</b></li>
<li>One or more <b>REQUIRED</b>:
<ul><li>Certified Information Systems Security Professional (CISSP)</li>
<li>Certified in Governance, Risk and Compliance (CGRC)</li>
<li>Certified Information Systems Auditor (CISA)</li>
<li>Certified in Risk and Information Systems Control (CRISC)</li></ul></li></ul><p><br>
<br>
</p><p><b>Clearance</b></p>
<ul>
<li>Public Trust / Suitability</li></ul></div>

Security Control Assessor / Analyst

<div><div><p><b>New</b>
<br>
Posted: May 18, 2026</p>
<p><i>This role is contingent upon award</i></p>
<h2 class="jobSectionHeader"><b>I. Program Overview</b></h2>
<h3 class="jobSectionHeader"><b>Program Description</b></h3>
<p>The IT CSSS program provides information security support to the Federal Bureau of Prisons Information Technology &amp; Data Division and other DOJ components as required. The program supports BOP obligations to protect federal information systems under FISMA, OMB Circular A-130, the Privacy Act, NIST RMF guidance, DOJ policy, and related cybersecurity requirements.</p>
<h3 class="jobSectionHeader"><b>Program Scope</b></h3>
<p>The program covers ATO maintenance and rapid ATO activities, RMF lifecycle support, JCAM-based authorization management, FISMA/FISCAM audit support, security architecture and engineering support, vulnerability and risk management, privacy documentation, FedRAMP assessment support, continuous monitoring, and coordination with BOP system owners, CORs, AOs, and technical stakeholders.</p>
<h2 class="jobSectionHeader"><b>II. Position Overview</b></h2>
<p>The Senior ISSO supports BOP and DOJ cybersecurity authorization, compliance, and continuous monitoring activities for federal information systems. The role develops, maintains, and assesses SA&amp;A packages; supports ATO maintenance and rapid ATO efforts; coordinates with system owners, assessors, technical teams, and government stakeholders; and ensures cybersecurity documentation, risk decisions, and control evidence remain accurate, defensible, and aligned to federal requirements.</p>
<h3 class="jobSectionHeader"><b>Work Environment</b></h3>
<ul><li>Work Location: BOP Central Office, Washington, DC; in-office required, telework as approved</li>
<li>Security Clearance: Public Trust / Suitability</li>
</ul><h2 class="jobSectionHeader"><b>III. Key Responsibilities</b></h2>
<h3 class="jobSectionHeader"><b>RMF and ATO Lifecycle Support</b></h3>
<ul><li>Develop, maintain, and assess SA&amp;A packages supporting ATO, re-ATO, ongoing authorization, and rapid authorization activities for BOP information systems.</li>
<li>Support RMF preparation, categorization, control selection, implementation, assessment, authorization, and continuous monitoring in accordance with DOJ and BOP requirements.</li>
<li>Use JCAM and government processes to document system registration, categorization, control baselines, authorization status, and required ATO artifacts.</li>
<li>Assemble authorization packages, including SSPP/SSP artifacts, SARs, POA&amp;Ms, residual risk reports, risk analysis reports, executive briefings, and authorization documentation.</li>
</ul><h3 class="jobSectionHeader"><b>Security Control Assessment and Documentation</b></h3>
<ul><li>Develop and maintain assessment plans, control documentation, implementation statements, test evidence, and assessment results.</li>
<li>Assess security and privacy controls against NIST SP 800-53, DOJ Cybersecurity Standards, BOP policy, and applicable federal guidance.</li>
<li>Identify documentation gaps, validate evidence, and coordinate corrective actions with system owners, engineers, assessors, and government stakeholders.</li>
<li>Update SSPP/SSP, SAR, POA&amp;M, contingency plan, incident response plan, configuration management plan, privacy, and supporting artifacts as system conditions change.</li>
</ul><h3 class="jobSectionHeader"><b>Risk, POA&amp;M, and Continuous Monitoring</b></h3>
<ul><li>Track and report cybersecurity risks, vulnerabilities, weaknesses, and remediation activities through POA&amp;M closure, risk acceptance, or corrective action.</li>
<li>Support ongoing authorization by monitoring system and environment changes, initiating security and privacy impact analysis, and updating artifacts as required.</li>
<li>Prepare security and privacy status reporting on system security posture, major risks, vulnerability status, POA&amp;M progress, and key authorization activities.</li>
<li>Coordinate with vulnerability management, SIEM, compliance, configuration management, and technical teams to collect evidence and support near real-time risk management.</li>
</ul><h3 class="jobSectionHeader"><b>Stakeholder Coordination and Reporting</b></h3>
<ul><li>Coordinate with BOP system owners, CORs, AOs, SCOP/privacy officials, assessors, technical teams, and contractor leadership to resolve authorization risks.</li>
<li>Prepare cybersecurity briefings, risk summaries, status updates, and decision support materials for government stakeholders and program leadership.</li>
<li>Support monthly status reporting by documenting completed activities, deliverables, risks, issues, corrective actions, and staffing or performance considerations.</li>
<li>Provide senior-level cybersecurity guidance regarding SA&amp;A readiness, ATO package quality, risk communication, and compliance expectations.</li>
</ul><h2 class="jobSectionHeader"><b>IV. Qualifications</b></h2>
<h3 class="jobSectionHeader"><b>Education</b></h3>
<ul><li>Bachelor&rsquo;s degree required.</li>
<li>Degree in cybersecurity, information systems, computer science, information technology, management information systems, or a related discipline preferred.</li>
</ul><h3 class="jobSectionHeader"><b>Professional Certifications</b></h3>
<p>Candidate must possess at least one of the following required certifications:</p>
<ul><li>CISA &ndash; Certified Information Systems Auditor.</li>
<li>CRISC &ndash; Certified in Risk and Information Systems Control.</li>
<li>CISSP &ndash; Certified Information Systems Security Professional.</li>
<li>CGRC &ndash; Certified in Governance, Risk and Compliance.</li>
</ul><h3 class="jobSectionHeader"><b>Minimum Qualifications</b></h3>
<ul><li>Minimum of seven (7) years of cybersecurity experience.</li>
<li>Minimum of six (6) years developing, maintaining, and assessing SA&amp;A packages resulting in an ATO for IT systems.</li>
<li>Experience supporting RMF, ATO maintenance, continuous monitoring, POA&amp;M management, control assessment, and security authorization documentation.</li>
<li>Experience preparing or maintaining SSP/SSPP, SAR, POA&amp;M, risk assessment, residual risk, incident response, contingency planning, configuration management, privacy, and authorization package artifacts.</li>
<li>Ability to coordinate with system owners, technical teams, assessors, authorizing officials, privacy stakeholders, CORs, and program leadership.</li>
<li>Public Trust / Suitability required; must be able to obtain and maintain required access for the duration of assignment.</li>
</ul><h3 class="jobSectionHeader"><b>Preferred Qualifications</b></h3>
<ul><li>Prior DOJ, BOP, or federal law enforcement cybersecurity support experience.</li>
<li>Experience using DOJ JCAM or similar governance, risk, and compliance systems to manage authorization artifacts and evidence.</li>
<li>Working knowledge of NIST SP 800-37, NIST SP 800-53, FISMA, FISCAM, OMB Circular A-130, Privacy Act requirements, DOJ cybersecurity policy, and FedRAMP concepts.</li>
<li>Experience supporting on-premises, cloud, hybrid, or air-gapped federal systems.</li>
<li>Strong written communication skills with the ability to produce audit-ready cybersecurity documentation and executive-level risk summaries.</li>
</ul></div><div><div><div><div><b>Job Category: </b>Analyst Cybersecurity Security
</div><div><b>Job Type: </b>Full Time
</div><div><b>Job Location: </b>Washington DC
</div><div><b>Education: </b>Bachelor's Degree
</div><div><b>Clearance: </b>Public Trust Clearance</div></div></div></div></div>

Senior Information System Security Officer (ISSO) (Cybersecurity Analyst III)

<div><div><p><b>New</b>
<br>
Posted: May 18, 2026</p>
<p><i>This role is contingent upon award</i></p>
<h2 class="jobSectionHeader"><b>I. Program Overview</b></h2>
<h3 class="jobSectionHeader"><b>Program Description</b></h3>
<p>The IT CSSS program provides information security support to the Federal Bureau of Prisons Information Technology &amp; Data Division and other DOJ components as required. The program supports BOP obligations to protect federal information systems under FISMA, OMB Circular A-130, the Privacy Act, NIST RMF guidance, DOJ policy, and related cybersecurity requirements.</p>
<h3 class="jobSectionHeader"><b>Program Scope</b></h3>
<p>The program covers ATO maintenance and rapid ATO activities, RMF lifecycle support, JCAM-based authorization management, FISMA/FISCAM audit support, security architecture and engineering support, vulnerability and risk management, privacy documentation, FedRAMP assessment support, continuous monitoring, and coordination with BOP system owners, CORs, AOs, and technical stakeholders.</p>
<h2 class="jobSectionHeader"><b>II. Position Overview</b></h2>
<p>The Senior ATO Subject Matter Expert supports BOP and DOJ cybersecurity authorization activities by leading system security assessments, preparing authorization documentation, and advising on security upgrades, policy alignment, and risk-based authorization decisions. The role supports live networks, desktop systems, servers, enterprise databases, cloud, hybrid, and classified environments as required, ensuring security A&amp;A and ATO activities are accurate, compliant, and aligned to federal and DOJ requirements.</p>
<h3 class="jobSectionHeader"><b>Work Environment</b></h3>
<ul><li>Work Location: BOP Central Office, Washington, DC; in-office required, telework as approved</li>
<li>Security Clearance: Public Trust / Suitability</li>
</ul><h2 class="jobSectionHeader"><b>III. Key Responsibilities</b></h2>
<h3 class="jobSectionHeader"><b>ATO and Authorization Lifecycle Leadership</b></h3>
<ul><li>Lead security A&amp;A and ATO activities for information systems across live networks, desktop systems, servers, enterprise databases, and classified or sensitive environments as assigned.</li>
<li>Develop, maintain, and assess authorization packages that support successful certification and accreditation, security authorization, reauthorization, and ongoing authorization decisions.</li>
<li>Apply NIST SP 800-37 RMF processes and DOJ/BOP authorization procedures to support prepare, categorize, select, implement, assess, authorize, and monitor activities.</li>
<li>Use JCAM or similar authorization management systems to document system information, control baselines, authorization evidence, risk decisions, and approval status.</li>
</ul><h3 class="jobSectionHeader"><b>System Security Assessment and Documentation</b></h3>
<ul><li>Perform system security assessments and prepare assessment-ready documentation for security controls, implementation status, technical evidence, and identified weaknesses.</li>
<li>Prepare, review, and update SSPP/SSP, SAR, POA&amp;M, residual risk, risk analysis, threat matrix, authorization memo, and executive briefing artifacts.</li>
<li>Assess system boundaries, information types, categorization decisions, control implementation details, and supporting evidence for accuracy and completeness.</li>
<li>Coordinate updates to incident response, contingency planning, configuration management, privacy, MOU/ISA, and other RMF-related documentation as required.</li>
</ul><h3 class="jobSectionHeader"><b>Security Policy, Compliance, and Risk Advisory</b></h3>
<ul><li>Assess and enhance IT security policies and procedures in response to federal, DOJ, BOP, and international regulatory requirements as applicable.</li>
<li>Apply strong working knowledge of NIST Special Publications, NIST SP 800-53 security control selection, and federal cybersecurity requirements to improve authorization readiness.</li>
<li>Analyze security findings, vulnerabilities, policy gaps, and control deficiencies to determine risk impact and recommend corrective actions or risk response options.</li>
<li>Support risk-based decision-making by translating security assessment results into clear recommendations for system owners, AOs, CORs, and program leadership.</li>
</ul><h3 class="jobSectionHeader"><b>Security Upgrades and Technical Coordination</b></h3>
<ul><li>Coordinate with system owners, operations and maintenance teams, engineers, and assessors to support security upgrades and remediation activities for operational systems.</li>
<li>Review proposed system and environment changes to determine potential security or privacy impact and required updates to authorization artifacts.</li>
<li>Support vulnerability remediation, control implementation validation, and technical evidence collection across on-premises, cloud, hybrid, and air-gapped environments.</li>
<li>Ensure security documentation reflects the as-implemented state of systems and remains current as technologies, configurations, and mission requirements evolve.</li>
</ul><h3 class="jobSectionHeader"><b>Reporting, Stakeholder Engagement, and Quality Control</b></h3>
<ul><li>Prepare written communications, status updates, briefings, risk summaries, and authorization decision support materials for government and contractor leadership.</li>
<li>Support monthly reporting by documenting deliverables, risks, issues, corrective actions, authorization milestones, and system security posture.</li>
<li>Coordinate with BOP system owners, CORs, AOs, privacy stakeholders, assessors, and technical teams to resolve documentation gaps and authorization risks.</li>
<li>Maintain high-quality, audit-ready artifacts that meet SOW requirements for content, completeness, accuracy, and conformance.</li>
</ul><h2 class="jobSectionHeader"><b>IV. Qualifications</b></h2>
<h3 class="jobSectionHeader"><b>Education</b></h3>
<ul><li>Bachelor&rsquo;s degree required.</li>
<li>Degree in cybersecurity, information systems, computer science, information technology, management information systems, or a STEM related discipline preferred.</li>
</ul><h3 class="jobSectionHeader"><b>Professional Certifications</b></h3>
<p>Candidate must possess at least one of the following required certifications:</p>
<ul><li>CISA &ndash; Certified Information Systems Auditor.</li>
<li>CRISC &ndash; Certified in Risk and Information Systems Control.</li>
<li>CISSP &ndash; Certified Information Systems Security Professional.</li>
<li>CAP &ndash; Certified Authorization Professional.</li>
</ul><h3 class="jobSectionHeader"><b>Minimum Qualifications</b></h3>
<ul><li>Minimum of seven (7) years of experience performing systems security assessments, preparing system security documentation, and/or performing security upgrades for live networks, desktop systems, servers, and enterprise databases leading to successful certification and accreditation or security authorization.</li>
<li>Minimum of seven (7) years of experience assessing and enhancing IT systems security policies and procedures in response to regulatory requirements associated with federal and international standards.</li>
<li>Minimum of seven (7) years of IT security experience with extensive knowledge of security regulations and security assessments, including experience developing security A&amp;A and ATO packages for a range of systems, including classified systems.</li>
<li>Experience supporting RMF, ATO maintenance, security authorization documentation, control assessment, risk analysis, POA&amp;M management, and ongoing authorization activities.</li>
<li>Ability to coordinate with system owners, technical teams, assessors, authorizing officials, privacy stakeholders, CORs, and program leadership.</li>
<li>Public Trust / Suitability required; must be able to obtain and maintain required access for the duration of the assignment.</li>
</ul><h3 class="jobSectionHeader"><b>Preferred Qualifications</b></h3>
<ul><li>Strong working knowledge of NIST Special Publications, including NIST SP 800-53 for security control selection and NIST SP 800-37 for RMF/security authorization.</li>
<li>Experience using DOJ JCAM or similar governance, risk, and compliance systems to manage authorization artifacts, evidence, and authorization status.</li>
<li>Prior DOJ, BOP, or federal law enforcement cybersecurity support experience.</li>
<li>Experience supporting on-premises, cloud, hybrid, air-gapped, or classified federal systems.</li>
<li>Strong written communication skills with the ability to produce audit-ready cybersecurity documentation and executive-level risk summaries.</li>
</ul></div><div><div><div><div><b>Job Category: </b>Analyst Cybersecurity Security SME
</div><div><b>Job Type: </b>Full Time
</div><div><b>Job Location: </b>Washington DC
</div><div><b>Education: </b>Bachelor's Degree
</div><div><b>Clearance: </b>Public Trust Clearance</div></div></div></div></div>

Senior ATO Subject Matter Expert Cybersecurity Analyst III

Gama-1 Technologies

<div><p>GAMA-1 Technologies is seeking a Senior Security Control Assessor to support cybersecurity assessments and compliance activities across federal systems and national security environments. In this role, you will evaluate security controls, conduct assessments aligned to NIST standards, and help ensure enterprise systems maintain strong security posture and regulatory compliance.</p><p>
This position is ideal for cybersecurity professionals with deep assessment experience who enjoy working at the intersection of compliance, technical security, and risk management.</p><p></p><h2 class="jobSectionHeader"><b>
What You Will Do in This Role</b></h2><ul><li>
Conduct Security Control Assessments (SCAs) against NIST standards and federal security requirements</li><li>
Review and evaluate security controls for classified and unclassified systems</li><li>
Identify security gaps, risks, and vulnerabilities and document findings clearly</li><li>
Support ATO and continuous monitoring activities across enterprise systems</li><li>
Collaborate with system owners, ISSOs, engineers, and compliance stakeholders</li><li>
Prepare assessment reports and provide remediation recommendations</li><li>
Support audit readiness and federal compliance initiatives</li><li>
Participate in risk management and security authorization activities</li></ul><p></p><h2 class="jobSectionHeader"><b>
What You Will Bring</b></h2><h3 class="jobSectionHeader"><b>
Required Qualifications</b></h3><ul><li>
8+ years of cybersecurity experience</li><li>
Experience performing Security Control Assessments using NIST SP 800-53A</li><li>
Experience supporting classified or national security systems</li><li>
Strong understanding of federal cybersecurity compliance standards</li><li>
Excellent analytical, communication, and documentation skills</li></ul><h3 class="jobSectionHeader"><b>
Preferred Qualifications</b></h3><ul><li>
Federal civilian or DoD experience</li><li>
Experience supporting enterprise security authorization efforts</li></ul><h3 class="jobSectionHeader"><b>
Certifications</b></h3><p>
Must possess at least one of the following:</p><ul><li>
CISSP</li><li>
CISA</li><li>
CRISC</li><li>
CGRC</li></ul>
This is a proposal position.<p>
GAMA-1 also offers a variety of benefits, including health insurance coverage, life and disability insurance, 401(k) savings plan, training and career development opportunities, paid holidays and paid time off (PTO - to cover vacation, illness or disability, appointments, emergencies or other situations that require time off from work). For more information click here.</p>
<p><b>ABOUT GAMA-1</b></p>
<p>GAMA-1 is a rapidly growing technology business that is based in Greenbelt, Maryland. GAMA-1 Technologies provides strategic information assurance, information security, and business enterprise and networking solutions to the Federal Government. Our success is based on the utilization of industry and agency standards, establishment of standardized processes, and IT Services expertise. At GAMA-1, we believe employees should grow, achieve, and develop just as the company grows, achieves, and develops. GAMA-1 is committed to providing our employees with opportunities for career advancement throughout their employment. For more information, visit www.gama1tech.com</p>
<p>GAMA-1 is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to: veteran status, uniformed servicemember status, race, color, religion, sex, sexual orientation, gender identity, age, pregnancy (including childbirth, lactation and related medical conditions), national origin or ancestry, citizenship or immigration status, physical or mental disability, genetic information (including testing and characteristics), domestic violence victims, political orientation, status as a smoker or tobacco user, hairstyle, use of a service animal, education status, familial status, HIV/AIDS status, height, weight, reproductive healthcare decisions or any other category protected by federal, state or local law.</p><p>
</p><p>ISSSFd2gcS</p></div>

Senior Security Control Assessor (SCA)

Tyto Athene

<div>Description:
<div>
Tyto Athene is searching for a <b>Part-Time Tier 2 Incident Response Analyst (IR)</b> to support a law enforcement customer in Washington, DC. Our IR analysts form the backbone of our cybersecurity services. You will play a critical role in securing our customers by monitoring our tools, triaging alerts, and investigating potential cyber threats. As a SOC team member, you will also serve as the initial point of contact for cybersecurity incidents, ensuring prompt and effective responses.We provide a supportive environment for you to learn from senior SOC team members, cross-train for other positions, and attend external training. We want to see you grow and improve your cybersecurity skills. Join us and delve into the complexities of monitoring enterprise networks, learn basic incident response techniques, and how to effectively investigate phishing threats against our clients.</div><div></div><div><b><br>
Responsibilities:</b></div><ul><li>
Utilize security tools to analyze, investigate, and triage security alerts</li><li>
Monitor our customers environments, including cloud and SaaS solutions for evidence of adversarial activity</li><li>
Perform in-depth analysis and investigation of high-priority cybersecurity incidents</li><li>
Utilize advanced tools, such as host based digital forensics or malware analysis capabilities, to identify incidents&rsquo; root causes, scope, and impact</li><li>
Collaborate with cyber threat hunting and cyber threat intelligence teams</li><li>
Participate in the development, implementation, and tuning of the SOC tools detection content and alerting signatures.</li><li>
Accurately document triage findings, and intake reports of external cybersecurity events from SOC customers via phone or email in the SOCs Incident Management System(IMS)</li><li>
Learn new open and closed-source investigative techniques</li><li>
Perform research into emerging threats and vulnerabilities to aid their prevention and mitigation</li><li>
Help shape the evolution of processes and procedures of the SOC</li><li>
Provide guidance and mentorship to Tier 1 SOC Analysts to enhance their skills and capabilities</li></ul>
Qualifications:
<div><b>
Required:</b></div><ul><li>
Minimum of four years of cybersecurity experience with at least three (3) years in a SOC watch floor analyst or IR role</li><li>
Bachelor&rsquo;s Degree or higher in Cybersecurity or related</li><li>
CISSP or CEH certification preferred; additional experience, formal training, certifications, and/or education may be substitutable at the client's discretion</li><li>
Experience in some of the following tools and technologies :i.e. SIEM experience required with Sumo Logic/Splunk preferred.</li><li>
Knowledge of common attacker tools, techniques and procedures (TTP)</li><li>
Experience with major cloud service provider offerings</li><li>
Knowledge of malware</li><li>
Knowledge of enterprise architecture including zero trust principles</li><li>
Knowledge of Windows and Unix operating systems</li><li>
Knowledge of common phishing techniques and how to investigate them</li><li>
Proficiency in technical writing</li><li>
Able to accurately and succinctly convey information through speaking, email, and presentations</li><li>
Comfortable in customer facing environments</li><li>
Ability to maintain a positive customer service mentality</li></ul><div><b>
Desired:</b></div><ul><li>
Previous SOC or incident response experience</li><li>
Working knowledge of regex and scripting languages</li><li>
Any SOC analyst relevant certifications such as those from GIAC or CompTIA</li><li>
The initiative to ask for assistance and offer fresh ideas to improve the SOC&rsquo;s performance</li></ul><div><b>
Clearance:
</b></div><ul><li>TS/SCI Clearance required</li></ul><div><b>
Location:</b></div><ul><li>
This hybrid role is expected to be on the client site as needed</li></ul><div><b>
Shift:</b></div><ul><li>
Fri Night - Sat Morning 10pm - 10am and/or Sat Night - Sun Morning 10pm - 10am</li></ul>
About Tyto Athene:
<div><b>
Compensation:</b></div><ul><li>
Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically $60/hr. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.</li></ul><div><b>
Benefits:</b></div><ul><li>
Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.</li></ul><div></div><div><br>
Tyto Athene is a trusted leader in IT services and solutions, delivering mission-focused digital transformation that drives measurable success. Our expertise spans four core technology domains&mdash;Network Modernization, Hybrid Cloud, Cybersecurity, and Enterprise IT&mdash;empowering our clients with cutting-edge solutions tailored to their evolving needs. With over 50 years of experience, Tyto Athene proudly support Defense, Intelligence, Space, National Security, Civilian, Health, and Public Safety clients across the United States and worldwide.</div><div>
</div><div>
At Tyto Athene, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamTyto?</div><div>
</div><div>
Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.</div></div>

Part-Time Tier 2 Incident Response Analyst - Weekend Nights

csengineering

<div><p><b>Business Systems Analyst
</b><br>
<br>
<b>**Future Opportunity**</b></p><p>
CSEngineering is seeking a Business Systems Analyst to join our growing team! This role serves as a subject matter expert in business processes, responsible for formulating systems scope and objectives aligned with organizational business plans and industry requirements. The ideal candidate will bring strong DoD lifecycle management knowledge and the ability to provide technical guidance on the business implications of various systems within a Defense Agency environment.<br>
<br>
<b>JOB RESPONSIBILITIES</b></p><ul><li>
The Business Systems Analyst will serve as an expert in particular business processes and will be responsible for formulating systems scope and objectives relative to the organization's business plan and industry requirements. This includes providing technical guidance concerning the business implications of the application of various systems.</li><li>
The Business Systems Analyst will act as a member of a project team, supporting the full DoD acquisition lifecycle in accordance with DoD 5000.1, 5000.2, and the associated Guidebook. This includes supporting Planning, Programming, Budget, and Execution (PPBE) activities and leveraging the ARIS system engineering tool as required.</li><li>
The position will prepare and format reports for the Defense Acquisition Executive Summary (DAES) OSD and the Defense Acquisition Management Information Retrieval (DAMIR) system.
</li><li>The role requires demonstrated familiarity with DoD reporting standards and acquisition management processes.</li><li>
The Business Systems Analyst will support cross-functional project teams by providing analysis and recommendations that bridge business operations and technical systems. This includes identifying opportunities to improve system alignment with organizational goals and mission priorities.</li></ul><p><b>
REQUIRED QUALIFICATIONS
</b></p><p><b><i>Security Clearance: Active Top Secret</i></b></p><ul><li><p>
Bachelor's Degree required</p></li><li><p>
Minimum of four (4) years of relevant experience.</p></li><li><p>
Demonstrated experience preparing reports for the Defense Acquisition Executive Summary (DAES) OSD and the Defense Acquisition Management Information Retrieval (DAMIR) system.</p></li><li><p>
Knowledge of DoD Lifecycle Management and DoD 5000.1, 5000.2, and the associated Guidebook.</p></li><li><p>
Experience supporting Planning, Programming, Budget, and Execution (PPBE) processes.</p></li><li><p>
Proficiency with the ARIS system engineering tool.</p></li><li><p>
Strong analytical, communication, and organizational skills with the ability to provide technical guidance to project teams and leadership.</p></li></ul><p><b>
Location:</b> Washington, DC (NCR) with potential travel to other government sites as required.</p><p><b>
COMPANY OVERVIEW</b></p><p><b>
Who we are-</b> CSEngineering, a Service-Disabled Veteran-owned small business established in 2002, is dedicated to becoming the premier engineering and services firm in our industry, all while prioritizing client satisfaction above all else.</p><p><b>
What we do</b>- With a rich history of excellence, we boast significant expertise in a wide array of areas, including satellite systems, weapons and missile systems, naval architecture, aviation systems, IT and Enterprise Architecture, and more. We offer a comprehensive range of services, including logistics, program management, and IT operations. As a recipient of the Hire Vets Gold Medallion award, we're proud of our commitment to veteran hiring, retention, and professional development.</p><p><b>
Why should you be a part of CSE-</b> At CSEngineering, our employees are at the heart of everything we do. We foster a culture of passion and growth, where individuals are encouraged to excel build fulfilling careers, and continually strive for excellence. Our dedication to innovation and excellence propels us forward, as we continuously strive to set new standards in our industry. Join us and be part of a team that's redefining what's possible.</p><p><i>
CSE offers a competitive salary and comprehensive benefits package, including medical, dental, life, disability, 401k, and paid time off.</i></p><p><i>
CSE is an equal opportunity employer committed to a culturally diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity and veteran status.</i></p></div>

Business Systems Analyst

Explore 139+ Security control assessor analyst cybersecurity analyst iii in Washington this May. Find roles across top companies and apply now to boost your career.