associate data analyst, washington d.c.

business development analyst Jobs in Washington

business development analyst

business systems analyst Jobs in Washington

business systems analyst

business systems analyst entry Jobs in Washington

business systems analyst entry

senior cyber security analyst

Cayuse Holdings

<div><p>The Cyber Incident Response Analyst role is pivotal in reinforcing the client&rsquo;s cybersecurity framework by serving as the primary entry point for all external communications regarding cybersecurity incidents and related information requests. Operating within the client&rsquo;s 24x7 Operations Center, the Analyst will engage in case management, triage, and operational coordination of cybersecurity incidents.</p><p></p><p><br>
This position aligns with Cayuse&rsquo;s core values of Innovation, Excellence, Collaboration, Adaptability, and Integrity by fostering technical solutions that meet customer needs, promoting teamwork, and prioritizing quality in deliverables.</p><br>
<ul><li>
Provide first-line support for incidents and technical issues reported by client&rsquo;s staff and customers.</li><li>
Categorize and escalate incidents according to severity and ensure compliance with Standard Operating Procedures (SOPs).</li><li>
Escalate cases to specialized teams (e.g., Threat Hunting, Vulnerability Management) where applicable.</li><li>
Serve as the point of contact to coordinate with regional teams, private-sector entities, and partners to ensure full incident lifecycle execution.</li><li>
Track and verify the distribution and resolution of service requests, while certifying effective communication between stakeholders.</li><li>
Maintain active oversight of shared mailboxes, incoming incident reports, and phone systems to ensure efficient case routing and response.</li><li>
Perform correlation analysis across cyber, physical, and communication threats to enhance situational awareness.</li><li>
Support senior leadership by contributing to daily, weekly, and monthly reports, outlining emerging threat patterns and operational metrics.</li><li>
Deliver exceptional customer service and technical support to the client&rsquo;s partners during incident responses.</li><li>
Participate in shift synchronization meetings to ensure seamless 24/7 Operations Center transitions.</li><li>
Other duties as assigned.</li></ul><br>
<ul><li>
Bachelor&rsquo;s degree in a related discipline such as Homeland Security or Business, or a combination of education, technical training and equivalent experience.</li><li>
CompTIA Security+ CE Certification: Demonstrates foundational knowledge in cybersecurity principles, risk management, and network security.</li><li>
ITIL v4/v5 Certification: Proficient in IT service management best practices, including service lifecycle, continual improvement, and aligning IT services with business needs.</li><li>
Demonstrated experience in delivering high-quality customer service, with a strong understanding of support workflows and client engagement best practices.</li><li>
Additional (2) two years of experience may be substituted with an Associate&rsquo;s degree.</li><li>
Additional (4) four years of military and/or operations environment experience may be substituted with a high school diploma.</li><li>
Must have between zero (0) and two (2) years of related experience.</li><li>
Some travel may be required to Continuity of Operations sites.</li><li>
Due to the nature of work at the client&rsquo;s facility, U.S. Citizen is required.</li><li>
Ability obtain and maintain Top Secret/SCI security clearance and DHS Fitness.</li><li>
Must be able to work varying hours 8-12 hours depending on needs to support 24/7/365 operations.</li><li>
Must be able to pass a background check. May require additional background checks as required by projects and/or clients at any time during employment.</li></ul><p><b>
Minimum Skills:</b></p><ul><li>
Minimum 2 years working directly with customer and service desk functions for WATCH Operations Center or Security Operations Center (SOC).</li><li>
Skilled in utilizing Amazon Connect for managing customer interactions and contact flows.</li><li>
Demonstrated knowledge and understanding of customer service techniques, demonstrated experience providing service desk or call center support.</li><li>
Exceptional communication skills and ability to stay calm in high stress events while maintaining good decision making, focus, and good prioritization skills.</li><li>
Experience working with a Service Desk platform such as ServiceNOW or Remedy.</li><li>
Ability and willingness to learn new tools and technologies and take on new responsibilities as assigned.</li><li>
Experience working with ServiceNOW and another alternative platform such as Remedy.</li><li>
High proficiency in Microsoft Office; including but not limited to: Word, Excel, PowerPoint, and other general software applications.</li></ul><p><b>
Our Commitment to you / overview of benefits
</b></p><ul><li>Medical, Dental and Vision Insurance; Wellness Program</li><li>
Flexible Spending Accounts (Healthcare, Dependent Care, Commuter)</li><li>
Short-Term and Long-Term Disability options</li><li>
Basic Life and AD&amp;D Insurance (Company Provided)</li><li>
Voluntary Life and AD&amp;D options</li><li>
401(k) Retirement Savings Plan with matching after one year</li><li>
Paid Time Off</li></ul><p><b>
Reports to: Program Manager</b></p><p></p><p><b><br>
Working Conditions
</b></p><ul><li>Professional office environment.</li><li>
Must be able to work varying hours 8-12 hours depending on needs to support 24/7/365 operations.</li><li>
Must be physically and mentally able to perform duties extended periods of time.</li><li>
Ability to use a computer and other office productivity tools with sufficient speed to meet the demands of this position.</li><li>
Must be able to establish a productive and professional workspace.</li><li>
Must be able to sit for long periods of time looking at computer screen.</li><li>
May be asked to work a flexible schedule which may include holidays.</li><li>
May be asked to travel for business or professional development purposes.</li><li>
May be asked to work hours outside of normal business hours.</li></ul><p><b>
Other Duties: </b><i>Please note this job description is not designed to cover or contain a comprehensive list of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.</i></p><p><b><i>
Cayuse is an Equal Opportunity Employer. All employment decisions are based on merit, qualifications, skills, and abilities. All qualified applicants will receive consideration for employment in accordance with any applicable federal, state, or local law.</i></b></p></div>

Cyber Incident Response Analyst- Junior

Karthik Consulting

<div><div><p><b>New</b>
<br>
Posted: May 18, 2026</p>
<p><i>This role is contingent upon award</i></p>
<h2 class="jobSectionHeader"><b>I. Program Overview</b></h2>
<h3 class="jobSectionHeader"><b>Program Description</b></h3>
<p>The IT CSSS program provides information security support to the Federal Bureau of Prisons Information Technology &amp; Data Division and other DOJ components as required. The program supports BOP obligations to protect federal information systems under FISMA, OMB Circular A-130, the Privacy Act, NIST RMF guidance, DOJ policy, and related cybersecurity requirements.</p>
<h3 class="jobSectionHeader"><b>Program Scope</b></h3>
<p>The program covers ATO maintenance and rapid ATO activities, RMF lifecycle support, JCAM-based authorization management, FISMA/FISCAM audit support, security architecture and engineering support, vulnerability and risk management, privacy documentation, FedRAMP assessment support, continuous monitoring, and coordination with BOP system owners, CORs, AOs, and technical stakeholders.</p>
<h2 class="jobSectionHeader"><b>II. Position Overview</b></h2>
<p>The Senior ISSO supports BOP and DOJ cybersecurity authorization, compliance, and continuous monitoring activities for federal information systems. The role develops, maintains, and assesses SA&amp;A packages; supports ATO maintenance and rapid ATO efforts; coordinates with system owners, assessors, technical teams, and government stakeholders; and ensures cybersecurity documentation, risk decisions, and control evidence remain accurate, defensible, and aligned to federal requirements.</p>
<h3 class="jobSectionHeader"><b>Work Environment</b></h3>
<ul><li>Work Location: BOP Central Office, Washington, DC; in-office required, telework as approved</li>
<li>Security Clearance: Public Trust / Suitability</li>
</ul><h2 class="jobSectionHeader"><b>III. Key Responsibilities</b></h2>
<h3 class="jobSectionHeader"><b>RMF and ATO Lifecycle Support</b></h3>
<ul><li>Develop, maintain, and assess SA&amp;A packages supporting ATO, re-ATO, ongoing authorization, and rapid authorization activities for BOP information systems.</li>
<li>Support RMF preparation, categorization, control selection, implementation, assessment, authorization, and continuous monitoring in accordance with DOJ and BOP requirements.</li>
<li>Use JCAM and government processes to document system registration, categorization, control baselines, authorization status, and required ATO artifacts.</li>
<li>Assemble authorization packages, including SSPP/SSP artifacts, SARs, POA&amp;Ms, residual risk reports, risk analysis reports, executive briefings, and authorization documentation.</li>
</ul><h3 class="jobSectionHeader"><b>Security Control Assessment and Documentation</b></h3>
<ul><li>Develop and maintain assessment plans, control documentation, implementation statements, test evidence, and assessment results.</li>
<li>Assess security and privacy controls against NIST SP 800-53, DOJ Cybersecurity Standards, BOP policy, and applicable federal guidance.</li>
<li>Identify documentation gaps, validate evidence, and coordinate corrective actions with system owners, engineers, assessors, and government stakeholders.</li>
<li>Update SSPP/SSP, SAR, POA&amp;M, contingency plan, incident response plan, configuration management plan, privacy, and supporting artifacts as system conditions change.</li>
</ul><h3 class="jobSectionHeader"><b>Risk, POA&amp;M, and Continuous Monitoring</b></h3>
<ul><li>Track and report cybersecurity risks, vulnerabilities, weaknesses, and remediation activities through POA&amp;M closure, risk acceptance, or corrective action.</li>
<li>Support ongoing authorization by monitoring system and environment changes, initiating security and privacy impact analysis, and updating artifacts as required.</li>
<li>Prepare security and privacy status reporting on system security posture, major risks, vulnerability status, POA&amp;M progress, and key authorization activities.</li>
<li>Coordinate with vulnerability management, SIEM, compliance, configuration management, and technical teams to collect evidence and support near real-time risk management.</li>
</ul><h3 class="jobSectionHeader"><b>Stakeholder Coordination and Reporting</b></h3>
<ul><li>Coordinate with BOP system owners, CORs, AOs, SCOP/privacy officials, assessors, technical teams, and contractor leadership to resolve authorization risks.</li>
<li>Prepare cybersecurity briefings, risk summaries, status updates, and decision support materials for government stakeholders and program leadership.</li>
<li>Support monthly status reporting by documenting completed activities, deliverables, risks, issues, corrective actions, and staffing or performance considerations.</li>
<li>Provide senior-level cybersecurity guidance regarding SA&amp;A readiness, ATO package quality, risk communication, and compliance expectations.</li>
</ul><h2 class="jobSectionHeader"><b>IV. Qualifications</b></h2>
<h3 class="jobSectionHeader"><b>Education</b></h3>
<ul><li>Bachelor&rsquo;s degree required.</li>
<li>Degree in cybersecurity, information systems, computer science, information technology, management information systems, or a related discipline preferred.</li>
</ul><h3 class="jobSectionHeader"><b>Professional Certifications</b></h3>
<p>Candidate must possess at least one of the following required certifications:</p>
<ul><li>CISA &ndash; Certified Information Systems Auditor.</li>
<li>CRISC &ndash; Certified in Risk and Information Systems Control.</li>
<li>CISSP &ndash; Certified Information Systems Security Professional.</li>
<li>CGRC &ndash; Certified in Governance, Risk and Compliance.</li>
</ul><h3 class="jobSectionHeader"><b>Minimum Qualifications</b></h3>
<ul><li>Minimum of seven (7) years of cybersecurity experience.</li>
<li>Minimum of six (6) years developing, maintaining, and assessing SA&amp;A packages resulting in an ATO for IT systems.</li>
<li>Experience supporting RMF, ATO maintenance, continuous monitoring, POA&amp;M management, control assessment, and security authorization documentation.</li>
<li>Experience preparing or maintaining SSP/SSPP, SAR, POA&amp;M, risk assessment, residual risk, incident response, contingency planning, configuration management, privacy, and authorization package artifacts.</li>
<li>Ability to coordinate with system owners, technical teams, assessors, authorizing officials, privacy stakeholders, CORs, and program leadership.</li>
<li>Public Trust / Suitability required; must be able to obtain and maintain required access for the duration of assignment.</li>
</ul><h3 class="jobSectionHeader"><b>Preferred Qualifications</b></h3>
<ul><li>Prior DOJ, BOP, or federal law enforcement cybersecurity support experience.</li>
<li>Experience using DOJ JCAM or similar governance, risk, and compliance systems to manage authorization artifacts and evidence.</li>
<li>Working knowledge of NIST SP 800-37, NIST SP 800-53, FISMA, FISCAM, OMB Circular A-130, Privacy Act requirements, DOJ cybersecurity policy, and FedRAMP concepts.</li>
<li>Experience supporting on-premises, cloud, hybrid, or air-gapped federal systems.</li>
<li>Strong written communication skills with the ability to produce audit-ready cybersecurity documentation and executive-level risk summaries.</li>
</ul></div><div><div><div><div><b>Job Category: </b>Analyst Cybersecurity Security
</div><div><b>Job Type: </b>Full Time
</div><div><b>Job Location: </b>Washington DC
</div><div><b>Education: </b>Bachelor's Degree
</div><div><b>Clearance: </b>Public Trust Clearance</div></div></div></div></div>

Senior Information System Security Officer (ISSO) (Cybersecurity Analyst III)

<div><div><p><b>New</b>
<br>
Posted: May 18, 2026</p>
<p><i>This role is contingent upon award</i></p>
<h2 class="jobSectionHeader"><b>I. Program Overview</b></h2>
<h3 class="jobSectionHeader"><b>Program Description</b></h3>
<p>The IT CSSS program provides information security support to the Federal Bureau of Prisons Information Technology &amp; Data Division and other DOJ components as required. The program supports BOP obligations to protect federal information systems under FISMA, OMB Circular A-130, the Privacy Act, NIST RMF guidance, DOJ policy, and related cybersecurity requirements.</p>
<h3 class="jobSectionHeader"><b>Program Scope</b></h3>
<p>The program covers ATO maintenance and rapid ATO activities, RMF lifecycle support, JCAM-based authorization management, FISMA/FISCAM audit support, security architecture and engineering support, vulnerability and risk management, privacy documentation, FedRAMP assessment support, continuous monitoring, and coordination with BOP system owners, CORs, AOs, and technical stakeholders.</p>
<h2 class="jobSectionHeader"><b>II. Position Overview</b></h2>
<p>The Security Control Assessor/Analyst supports BOP and DOJ cybersecurity authorization activities by assessing security controls, validating evidence, analyzing risk, and preparing assessment documentation for classified and unclassified systems, including National Security Systems. This role supports RMF, ATO maintenance, continuous monitoring, and security authorization activities by ensuring assessments are technically sound, properly documented, and aligned with NIST SP 800-53A, DOJ/BOP requirements, and program delivery expectations.</p>
<h3 class="jobSectionHeader"><b>Work Environment</b></h3>
<ul><li>Work Location: BOP Central Office, Washington, DC; in-office required, telework as approved</li>
<li>Security Clearance: Public Trust / Suitability</li>
</ul><h2 class="jobSectionHeader"><b>III. Key Responsibilities</b></h2>
<h3 class="jobSectionHeader"><b>Security Control Assessment</b></h3>
<ul><li>Assess security and privacy controls for classified and unclassified systems, including National Security Systems, in accordance with NIST SP 800-53A, DOJ/BOP requirements, and approved assessment plans.</li>
<li>Validate implementation evidence, test results, artifacts, and technical documentation to determine whether controls are implemented correctly, operating as intended, and producing the desired security outcome.</li>
<li>Document assessment results, findings, deficiencies, recommendations, and risk implications in Security Assessment Reports and related authorization artifacts.</li>
<li>Coordinate with ISSOs, system owners, engineers, and authorization stakeholders to resolve control assessment questions and evidence gaps.</li>
</ul><h3 class="jobSectionHeader"><b>RMF, ATO, and Authorization Support</b></h3>
<ul><li>Support RMF lifecycle activities for ATO maintenance, rapid ATOs, reauthorization, ongoing authorization, and continuous monitoring.</li>
<li>Review authorization package content, including SSPP/SSP, SAR, POA&amp;M, residual risk reports, risk analysis reports, threat matrix reports, and executive briefings.</li>
<li>Use JCAM or similar authorization management systems to review control implementation data, assessment records, evidence, and authorization status.</li>
<li>Support AO and stakeholder decision-making by providing clear assessment findings and risk-based recommendations.</li>
</ul><h3 class="jobSectionHeader"><b>Classified, Unclassified, and NSS Security Assessment Support</b></h3>
<ul><li>Apply specialized cybersecurity assessment expertise across classified programs, unclassified programs, National Security Systems, and sensitive federal environments as assigned.</li>
<li>Evaluate system boundaries, security categorization, control applicability, inherited controls, hybrid controls, and assessment scope to support accurate authorization decisions.</li>
<li>Assess live networks, system components, cloud or hybrid environments, and enterprise services to determine security posture and compliance readiness.</li>
<li>Ensure assessment work reflects the operational environment, mission use, technical architecture, and applicable federal security requirements.</li>
</ul><h3 class="jobSectionHeader"><b>Risk, Vulnerability, and POA&amp;M Analysis</b></h3>
<ul><li>Analyze control weaknesses, vulnerabilities, audit findings, and technical deficiencies to determine severity, risk impact, and recommended remediation approach.</li>
<li>Support POA&amp;M creation, review, validation, tracking, and closure by ensuring weaknesses are clearly documented and tied to corrective actions.</li>
<li>Review remediation evidence and updated assessment results to determine whether findings can be reduced, closed, or escalated for risk acceptance consideration.</li>
<li>Coordinate with vulnerability management, incident response, configuration management, and O&amp;M teams to align findings with operational remediation activities.</li>
</ul><h3 class="jobSectionHeader"><b>Reporting, Documentation, and Stakeholder Coordination</b></h3>
<ul><li>Prepare written communications, assessment summaries, status updates, findings reports, and briefing materials for government and contractor leadership.</li>
<li>Support monthly reporting by documenting assessment progress, deliverables, risks, issues, corrective actions, and key authorization activities.</li>
<li>Maintain audit-ready documentation that meets SOW requirements for content, completeness, accuracy, and conformance.</li>
<li>Communicate technical assessment results in clear language for system owners, CORs, AOs, privacy stakeholders, and program leadership.</li>
</ul><h2 class="jobSectionHeader"><b>IV. Qualifications</b></h2>
<h3 class="jobSectionHeader"><b>Education</b></h3>
<ul><li>Bachelor&rsquo;s degree required.</li>
<li>Degree in cybersecurity, information systems, computer science, information technology, management information systems, or a related discipline preferred.</li>
</ul><h3 class="jobSectionHeader"><b>Professional Certifications</b></h3>
<p>Candidate must possess at least one of the following required certifications:</p>
<ul><li>CISA &ndash; Certified Information Systems Auditor.</li>
<li>CRISC &ndash; Certified in Risk and Information Systems Control.</li>
<li>CISSP &ndash; Certified Information Systems Security Professional.</li>
<li>CGRC &ndash; Certified in Governance, Risk and Compliance.</li>
</ul><h3 class="jobSectionHeader"><b>Minimum Qualifications</b></h3>
<ul><li>Minimum of eight (8) years of cybersecurity expertise.</li>
<li>Minimum of five (5) years of specialized experience supporting classified and unclassified programs, National Security Systems, and NIST SP 800-53A security control assessment activities.</li>
<li>Experience performing security control assessments, validating assessment evidence, documenting findings, and supporting authorization decisions for federal information systems.</li>
<li>Experience supporting RMF, ATO maintenance, control assessment, risk analysis, POA&amp;M management, and continuous monitoring activities.</li>
<li>Ability to coordinate with system owners, ISSOs, engineers, assessors, authorizing officials, privacy stakeholders, CORs, and program leadership.</li>
<li>Public Trust / Suitability required; must be able to obtain and maintain required access for the duration of the assignment.</li>
</ul><h3 class="jobSectionHeader"><b>Preferred Qualifications</b></h3>
<ul><li>Strong working knowledge of NIST Special Publications, including NIST SP 800-53A assessment procedures, NIST SP 800-53 security controls, and NIST SP 800-37 RMF/security authorization.</li>
<li>Experience using DOJ JCAM or similar governance, risk, and compliance systems to review authorization artifacts, assessment evidence, and authorization status.</li>
<li>Prior DOJ, BOP, DoD, Intelligence Community, or federal law enforcement cybersecurity assessment experience.</li>
<li>Experience assessing controls for on-premises, cloud, hybrid, air-gapped, or classified federal systems.</li>
<li>Strong written communication skills with the ability to produce audit-ready assessment documentation and executive-level risk summaries.</li>
</ul></div><div><div><div><div><b>Job Category: </b>Analyst Cybersecurity Security
</div><div><b>Job Type: </b>Full Time
</div><div><b>Job Location: </b>Washington DC
</div><div><b>Education: </b>Bachelor's Degree
</div><div><b>Clearance: </b>Public Trust Clearance</div></div></div></div></div>

Security Control Assessor/Analyst (Cybersecurity Analyst III)

<div><div><p><b>New</b>
<br>
Posted: May 18, 2026</p>
<p><i>This role is contingent upon award</i></p>
<h2 class="jobSectionHeader"><b>I. Program Overview</b></h2>
<h3 class="jobSectionHeader"><b>Program Description</b></h3>
<p>The IT CSSS program provides information security support to the Federal Bureau of Prisons Information Technology &amp; Data Division and other DOJ components as required. The program supports BOP obligations to protect federal information systems under FISMA, OMB Circular A-130, the Privacy Act, NIST RMF guidance, DOJ policy, and related cybersecurity requirements.</p>
<h3 class="jobSectionHeader"><b>Program Scope</b></h3>
<p>The program covers ATO maintenance and rapid ATO activities, RMF lifecycle support, JCAM-based authorization management, FISMA/FISCAM audit support, security architecture and engineering support, vulnerability and risk management, privacy documentation, FedRAMP assessment support, continuous monitoring, and coordination with BOP system owners, CORs, AOs, and technical stakeholders.</p>
<h2 class="jobSectionHeader"><b>II. Position Overview</b></h2>
<p>The Senior ATO Subject Matter Expert supports BOP and DOJ cybersecurity authorization activities by leading system security assessments, preparing authorization documentation, and advising on security upgrades, policy alignment, and risk-based authorization decisions. The role supports live networks, desktop systems, servers, enterprise databases, cloud, hybrid, and classified environments as required, ensuring security A&amp;A and ATO activities are accurate, compliant, and aligned to federal and DOJ requirements.</p>
<h3 class="jobSectionHeader"><b>Work Environment</b></h3>
<ul><li>Work Location: BOP Central Office, Washington, DC; in-office required, telework as approved</li>
<li>Security Clearance: Public Trust / Suitability</li>
</ul><h2 class="jobSectionHeader"><b>III. Key Responsibilities</b></h2>
<h3 class="jobSectionHeader"><b>ATO and Authorization Lifecycle Leadership</b></h3>
<ul><li>Lead security A&amp;A and ATO activities for information systems across live networks, desktop systems, servers, enterprise databases, and classified or sensitive environments as assigned.</li>
<li>Develop, maintain, and assess authorization packages that support successful certification and accreditation, security authorization, reauthorization, and ongoing authorization decisions.</li>
<li>Apply NIST SP 800-37 RMF processes and DOJ/BOP authorization procedures to support prepare, categorize, select, implement, assess, authorize, and monitor activities.</li>
<li>Use JCAM or similar authorization management systems to document system information, control baselines, authorization evidence, risk decisions, and approval status.</li>
</ul><h3 class="jobSectionHeader"><b>System Security Assessment and Documentation</b></h3>
<ul><li>Perform system security assessments and prepare assessment-ready documentation for security controls, implementation status, technical evidence, and identified weaknesses.</li>
<li>Prepare, review, and update SSPP/SSP, SAR, POA&amp;M, residual risk, risk analysis, threat matrix, authorization memo, and executive briefing artifacts.</li>
<li>Assess system boundaries, information types, categorization decisions, control implementation details, and supporting evidence for accuracy and completeness.</li>
<li>Coordinate updates to incident response, contingency planning, configuration management, privacy, MOU/ISA, and other RMF-related documentation as required.</li>
</ul><h3 class="jobSectionHeader"><b>Security Policy, Compliance, and Risk Advisory</b></h3>
<ul><li>Assess and enhance IT security policies and procedures in response to federal, DOJ, BOP, and international regulatory requirements as applicable.</li>
<li>Apply strong working knowledge of NIST Special Publications, NIST SP 800-53 security control selection, and federal cybersecurity requirements to improve authorization readiness.</li>
<li>Analyze security findings, vulnerabilities, policy gaps, and control deficiencies to determine risk impact and recommend corrective actions or risk response options.</li>
<li>Support risk-based decision-making by translating security assessment results into clear recommendations for system owners, AOs, CORs, and program leadership.</li>
</ul><h3 class="jobSectionHeader"><b>Security Upgrades and Technical Coordination</b></h3>
<ul><li>Coordinate with system owners, operations and maintenance teams, engineers, and assessors to support security upgrades and remediation activities for operational systems.</li>
<li>Review proposed system and environment changes to determine potential security or privacy impact and required updates to authorization artifacts.</li>
<li>Support vulnerability remediation, control implementation validation, and technical evidence collection across on-premises, cloud, hybrid, and air-gapped environments.</li>
<li>Ensure security documentation reflects the as-implemented state of systems and remains current as technologies, configurations, and mission requirements evolve.</li>
</ul><h3 class="jobSectionHeader"><b>Reporting, Stakeholder Engagement, and Quality Control</b></h3>
<ul><li>Prepare written communications, status updates, briefings, risk summaries, and authorization decision support materials for government and contractor leadership.</li>
<li>Support monthly reporting by documenting deliverables, risks, issues, corrective actions, authorization milestones, and system security posture.</li>
<li>Coordinate with BOP system owners, CORs, AOs, privacy stakeholders, assessors, and technical teams to resolve documentation gaps and authorization risks.</li>
<li>Maintain high-quality, audit-ready artifacts that meet SOW requirements for content, completeness, accuracy, and conformance.</li>
</ul><h2 class="jobSectionHeader"><b>IV. Qualifications</b></h2>
<h3 class="jobSectionHeader"><b>Education</b></h3>
<ul><li>Bachelor&rsquo;s degree required.</li>
<li>Degree in cybersecurity, information systems, computer science, information technology, management information systems, or a STEM related discipline preferred.</li>
</ul><h3 class="jobSectionHeader"><b>Professional Certifications</b></h3>
<p>Candidate must possess at least one of the following required certifications:</p>
<ul><li>CISA &ndash; Certified Information Systems Auditor.</li>
<li>CRISC &ndash; Certified in Risk and Information Systems Control.</li>
<li>CISSP &ndash; Certified Information Systems Security Professional.</li>
<li>CAP &ndash; Certified Authorization Professional.</li>
</ul><h3 class="jobSectionHeader"><b>Minimum Qualifications</b></h3>
<ul><li>Minimum of seven (7) years of experience performing systems security assessments, preparing system security documentation, and/or performing security upgrades for live networks, desktop systems, servers, and enterprise databases leading to successful certification and accreditation or security authorization.</li>
<li>Minimum of seven (7) years of experience assessing and enhancing IT systems security policies and procedures in response to regulatory requirements associated with federal and international standards.</li>
<li>Minimum of seven (7) years of IT security experience with extensive knowledge of security regulations and security assessments, including experience developing security A&amp;A and ATO packages for a range of systems, including classified systems.</li>
<li>Experience supporting RMF, ATO maintenance, security authorization documentation, control assessment, risk analysis, POA&amp;M management, and ongoing authorization activities.</li>
<li>Ability to coordinate with system owners, technical teams, assessors, authorizing officials, privacy stakeholders, CORs, and program leadership.</li>
<li>Public Trust / Suitability required; must be able to obtain and maintain required access for the duration of the assignment.</li>
</ul><h3 class="jobSectionHeader"><b>Preferred Qualifications</b></h3>
<ul><li>Strong working knowledge of NIST Special Publications, including NIST SP 800-53 for security control selection and NIST SP 800-37 for RMF/security authorization.</li>
<li>Experience using DOJ JCAM or similar governance, risk, and compliance systems to manage authorization artifacts, evidence, and authorization status.</li>
<li>Prior DOJ, BOP, or federal law enforcement cybersecurity support experience.</li>
<li>Experience supporting on-premises, cloud, hybrid, air-gapped, or classified federal systems.</li>
<li>Strong written communication skills with the ability to produce audit-ready cybersecurity documentation and executive-level risk summaries.</li>
</ul></div><div><div><div><div><b>Job Category: </b>Analyst Cybersecurity Security SME
</div><div><b>Job Type: </b>Full Time
</div><div><b>Job Location: </b>Washington DC
</div><div><b>Education: </b>Bachelor's Degree
</div><div><b>Clearance: </b>Public Trust Clearance</div></div></div></div></div>

Senior ATO Subject Matter Expert Cybersecurity Analyst III

Federal Professional Solutions

<p><b>About This Role</b></p><p>As a Cybersecurity Analyst, you will support the security program to ensure assets are protected and assess/manage the security environment through the implementation of new security technologies and controls. To be successful in this role, you will need to have Proficiency in Microsoft Excel for data analysis, reporting, and visualization, strong Splunk and scripting experience. You will also need to have experience in presenting vulnerability information in a way that shows vulnerability trends for a given application, platform, or specific type of technology.</p><p><b>Work Location:</b> Hybrid (minimum 3 days onsite a week) &ndash; Washington, DC</p><p><b>Clearance: </b>U.S. Citizenship and DOD Top Secret clearance</p><p><b>Status: </b>Exempt</p><p><b>Responsibilities:</b><br/>Daily responsibilities may include:</p><p>&middot; Monitor and analyze security alerts from various sources (SIEM, IDS/IPS, firewalls, endpoint protection).</p><p>&middot; Produce daily, weekly, monthly, or quarterly vulnerability reports that track critical, high, medium, and low categorized vulnerabilities in a way that shows actionable date such as a given percent an given platform or vulnerability category has risen or been remediated.</p><p>&middot; Investigate and respond to security incidents, ensuring timely containment and remediation.</p><p>&middot; Perform vulnerability assessments and recommend mitigation strategies.</p><p>&middot; Maintain and update security documentation, including incident reports and playbooks.</p><p>&middot; Collaborate with IT teams to implement security controls and best practices.</p><p>&middot; Conduct threat intelligence research to identify emerging risks and attack vectors.</p><p>&middot; Support compliance efforts with relevant frameworks (e.g., NIST, ISO 27001, etc).</p><p>&middot; Assist in security awareness training for employees.</p><p>&middot; Participate in regular security audits and risk assessments.</p><p>&middot; Provide recommendations for improving overall security posture.</p><p>&middot; Proactively work with engineering, operations, development, and customers to maintain practices that meet defined policies and standards for information security</p><p>&middot; Conduct continuous assessment of current technology architecture for vulnerabilities, weaknesses and other risks</p><p>&middot; Support information security audits performed internally by the organization or third-party personnel</p><p>&middot; Coordinate, detect, measure, and report on the technical aspects of security processes and operational components of incident management</p><p>&middot; Manage the day-to-day activities of threat and vulnerability management, identify risk tolerances, recommend treatment plans and communicate information about residual risk</p><p>&middot; Ensure audit trails, system logs and other cybersecurity monitoring data sources are configured in accordance with cybersecurity policy and accessible to necessary parties for review and compliance</p><p>&middot; Support, coordinate, and adhere to security-testing procedures to verify the security of systems, networks and applications, and support the remediation of identified vulnerabilities</p><p>&middot; Liaise among internal teams and external vendors to ensure compliance and a strong security posture</p><p>&middot; Consult with IT staff to ensure that security is factored into the evaluation, selection, installation and configuration of hardware, applications and software</p><p>&middot; Recommend and coordinate the implementation of technical controls to support and enforce defined security policies</p><p>&middot; Implement and maintain Splunk / Tenable platform infrastructure and configuration as well as support day-to-day operational and user support</p><p>&middot; Customize Splunk queries and service help desk requests for Splunk / Tenable platform system-related assistance</p><p>&middot; Conducts advanced searching, forensics, and analytics utilizing security tools in support of cybersecurity tasks</p><p><b>Qualifications</b></p><p>&middot; DOD Top Secret clearance SCI</p><p>&middot; One or more Information Security Certifications (i.e Security+, CEH, CISSP, CISA, CISM, CBCP, or GIAC)</p><p>&middot; Bachelor in Cybersecurity or similar field</p><p>&middot; A minimum of 3 years of IT experience, with at least 3 years in an information security role and at least 3 years of experience with Splunk Enterprise</p><p>&middot; A strong understanding of the business impact of security tools, technologies, and policies</p><p>&middot; Analytical skills, and high-level problem-solving skills that allow for effective and efficient resolution to many complex information security issues</p><p>&middot; Proficiency in Microsoft Office Suite (Excel, Word, PowerPoint, Outlook) for documentation, reporting, and presentations</p><p>o Excel: Pivot tables, formulas, data analysis, data visualization for reporting</p><p>o Word: Professional documentation and formatting</p><p>o PowerPoint: Creating clear and engaging presentations</p><p>o Outlook: Efficient email and calendar management</p><p>&middot; Able to complete responsibilities in a timely, professional, and quality manner</p><p>&middot; Collaborative and effective team player and able to express oneself clearly and in technical and non-technical terms to a globally dispersed team</p><p>&middot; Ability to translate specific goals into action and follow through to achieve goals and take initiative, seek and act on opportunities to improve organization performance</p><p>&middot; You do not need to possess 100% of these qualities to be considered</p><p>&middot; You must be available to work onsite as required by job</p><p>Pay: $120,000.00 per year</p><p>Benefits:</p><ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Health insurance</li><li>Paid time off</li><li>Vision insurance</li></ul><p>Application Question(s):</p><ul><li>Are you a U.S. citizen?</li></ul><p>Education:</p><ul><li>Bachelor's (Required)</li></ul><p>Experience:</p><ul><li>Splunk: 3 years (Required)</li><li>IT experience?: 3 years (Required)</li></ul><p>License/Certification:</p><ul><li>CISSP (Preferred)</li><li>CISM (Preferred)</li><li>CRISC (Preferred)</li></ul><p>Security clearance:</p><ul><li>Top Secret (Required)</li></ul><p>Work Location: In person</p>

Cybersecurity Analyst

csengineering

<div><p><b>Business Systems Analyst
</b><br>
<br>
<b>**Future Opportunity**</b></p><p>
CSEngineering is seeking a Business Systems Analyst to join our growing team! This role serves as a subject matter expert in business processes, responsible for formulating systems scope and objectives aligned with organizational business plans and industry requirements. The ideal candidate will bring strong DoD lifecycle management knowledge and the ability to provide technical guidance on the business implications of various systems within a Defense Agency environment.<br>
<br>
<b>JOB RESPONSIBILITIES</b></p><ul><li>
The Business Systems Analyst will serve as an expert in particular business processes and will be responsible for formulating systems scope and objectives relative to the organization's business plan and industry requirements. This includes providing technical guidance concerning the business implications of the application of various systems.</li><li>
The Business Systems Analyst will act as a member of a project team, supporting the full DoD acquisition lifecycle in accordance with DoD 5000.1, 5000.2, and the associated Guidebook. This includes supporting Planning, Programming, Budget, and Execution (PPBE) activities and leveraging the ARIS system engineering tool as required.</li><li>
The position will prepare and format reports for the Defense Acquisition Executive Summary (DAES) OSD and the Defense Acquisition Management Information Retrieval (DAMIR) system.
</li><li>The role requires demonstrated familiarity with DoD reporting standards and acquisition management processes.</li><li>
The Business Systems Analyst will support cross-functional project teams by providing analysis and recommendations that bridge business operations and technical systems. This includes identifying opportunities to improve system alignment with organizational goals and mission priorities.</li></ul><p><b>
REQUIRED QUALIFICATIONS
</b></p><p><b><i>Security Clearance: Active Top Secret</i></b></p><ul><li><p>
Bachelor's Degree required</p></li><li><p>
Minimum of four (4) years of relevant experience.</p></li><li><p>
Demonstrated experience preparing reports for the Defense Acquisition Executive Summary (DAES) OSD and the Defense Acquisition Management Information Retrieval (DAMIR) system.</p></li><li><p>
Knowledge of DoD Lifecycle Management and DoD 5000.1, 5000.2, and the associated Guidebook.</p></li><li><p>
Experience supporting Planning, Programming, Budget, and Execution (PPBE) processes.</p></li><li><p>
Proficiency with the ARIS system engineering tool.</p></li><li><p>
Strong analytical, communication, and organizational skills with the ability to provide technical guidance to project teams and leadership.</p></li></ul><p><b>
Location:</b> Washington, DC (NCR) with potential travel to other government sites as required.</p><p><b>
COMPANY OVERVIEW</b></p><p><b>
Who we are-</b> CSEngineering, a Service-Disabled Veteran-owned small business established in 2002, is dedicated to becoming the premier engineering and services firm in our industry, all while prioritizing client satisfaction above all else.</p><p><b>
What we do</b>- With a rich history of excellence, we boast significant expertise in a wide array of areas, including satellite systems, weapons and missile systems, naval architecture, aviation systems, IT and Enterprise Architecture, and more. We offer a comprehensive range of services, including logistics, program management, and IT operations. As a recipient of the Hire Vets Gold Medallion award, we're proud of our commitment to veteran hiring, retention, and professional development.</p><p><b>
Why should you be a part of CSE-</b> At CSEngineering, our employees are at the heart of everything we do. We foster a culture of passion and growth, where individuals are encouraged to excel build fulfilling careers, and continually strive for excellence. Our dedication to innovation and excellence propels us forward, as we continuously strive to set new standards in our industry. Join us and be part of a team that's redefining what's possible.</p><p><i>
CSE offers a competitive salary and comprehensive benefits package, including medical, dental, life, disability, 401k, and paid time off.</i></p><p><i>
CSE is an equal opportunity employer committed to a culturally diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, color, age, sex, national origin, sexual orientation, gender identity and veteran status.</i></p></div>

Business Systems Analyst

Noblis

<div>Responsibilities:
<ul><li>This is for a potential upcoming opportunity.</li></ul><div><br>
</div><div><b>Position Overview</b></div><div></div><div><br>
 The <b>Senior Project Management Analyst, RA</b> provides <b>senior-level programmatic, analytical, and coordination support</b> to PMS 339, with direct engagement across <b>Program Management (PAPM/APM), technical stakeholders, and requirements sponsors</b>.</div><div>
This role is responsible for <b>leading Requirements Analysis efforts, overseeing MPT product development, managing program execution tracking, and providing mentorship and guidance to junior analysts</b>, while ensuring compliance with applicable Navy and DoD policies.</div><div></div><div><b><br>
Senior Requirements Analysis Leadership</b></div><ul><li>
Lead development, review, and integration of <b>Manpower, Personnel, and Training (MPT) requirements</b> for assigned platforms and programs.</li><li>
Provide subject matter expertise to ensure requirements are <b>operationally relevant, technically accurate, and aligned with Fleet needs</b>.</li><li>
Guide the refinement of requirements documentation and supporting analyses in accordance with program objectives.</li></ul><div></div><div><b><br>
Program Management Office (PMS 339) Integration</b></div><ul><li>
Serve as a <b>primary liaison between Requirements Analysis teams and PMS 339 Program Management (PAPM/APM)</b>.</li><li>
Support program leadership with <b>decision-quality inputs, risk identification, and execution status updates</b>.</li><li>
Participate in and support <b>program reviews, milestone events, and senior stakeholder engagements</b>.</li></ul><div></div><div><b><br>
MPT Product Oversight &amp; Quality Assurance</b></div><ul><li>
Oversee development, review, and lifecycle management of MPT documentation, including:</li><li><ul><li><b>
NTSPs (Navy Training System Plans)</b></li><li><b>
CSPPs / Training Support Products</b></li><li><b>
SMDs / PSMDs (Ship Manpower Documents)</b></li><li><b>
Front End Analyses (FEA) and Training Effectiveness Evaluations (TEE/TEEPs)</b></li></ul></li><li>
Ensure products meet <b>OPNAVINST 1500.76 (series)</b> requirements and align with acquisition milestones.</li></ul><div></div><div><b><br>
Program Execution &amp; Risk Management</b></div><ul><li>
Lead tracking and execution of <b>RA-related program deliverables</b>, ensuring alignment with cost, schedule, and performance objectives.</li><li>
Identify, assess, and mitigate <b>program risks impacting MPT development and delivery</b>.</li><li>
Maintain authoritative oversight of <b>project trackers, schedules, and reporting mechanisms</b>.</li></ul><div></div><div><b><br>
Supervisory &amp; Team Leadership Responsibilities</b></div><ul><li>
Provide <b>tasking guidance, mentorship, and technical oversight</b> to junior and mid-level analysts.</li><li>
Review team deliverables for <b>accuracy, completeness, and compliance</b> prior to submission.</li><li>
Support workforce development by sharing <b>best practices, lessons learned, and process improvements</b>.</li></ul><div></div><div><b><br>
Stakeholder Coordination &amp; Strategic Communication</b></div><ul><li>
Lead preparation and delivery of <b>briefings, executive summaries, and stakeholder reports</b>.</li><li>
Coordinate across <b>engineering, logistics, training, and Fleet stakeholders</b> to ensure unified program execution.</li><li>
Translate complex technical and programmatic data into <b>clear, actionable insights for decision-makers</b>.</li></ul><div></div><div><b><br>
Data Management &amp; Process Improvement</b></div><ul><li>
Ensure integrity and traceability of <b>requirements data, program documentation, and configuration-controlled artifacts</b>.</li><li>
Recommend and implement improvements to <b>RA processes, tools, and reporting methodologies</b>.</li><li>
Support adoption of standardized <b>program management and requirements tracking frameworks</b>.</li></ul><div><b>
Why This Role Matters</b></div><div>
 At the senior level, Requirements Analysis (RA) directly shapes how the Navy defines, resources, and delivers training capabilities across the Fleet.</div><div>
As a <b>Senior Project Management Analyst</b>, you will operate at the <b>intersection of requirements development, program execution, and stakeholder decision-making</b>, ensuring that Manpower, Personnel, and Training (MPT) products are <b>accurate, actionable, and aligned with Fleet readiness objectives</b>. Your leadership and oversight will influence how PMS 339 programs translate operational needs into <b>training systems that prepare Sailors to perform in complex environments</b>.</div><div></div><div><b><br>
Work Environment</b></div><ul><li><b>
Contractor / Alternate Worksite (DC / VA / MD region)</b></li><li>
Direct engagement with <b>NAVSEA PMS 339 Program Office</b></li><li>
Hybrid work environment possible based on program requirements</li><li>
Collaboration across <b>multi-disciplinary government and contractor teams</b></li></ul><div></div><div><b><br>
Who Should Apply</b></div><div>
This role is ideal for professionals who:</div><ul><li>
Have led or significantly contributed to <b>Navy requirements, training, or acquisition programs</b></li><li>
Are comfortable operating at the <b>program office level with senior stakeholders</b></li><li>
Have experience managing <b>complex efforts with multiple dependencies and deliverables</b></li><li>
Are ready to take on <b>leadership responsibilities while remaining technically engaged</b></li><li><div>
Veterans with <b>senior enlisted or officer experience</b>, particularly those who have served in <b>training, readiness, or program support roles</b>, are highly encouraged to apply.</div></li></ul><div>
If you are motivated by <b>shaping how the Navy defines and delivers training capability at scale</b>, this role offers direct impact at the program level. At the senior level, your experience helps translate operational needs into <b>actionable, resourced training capabilities</b>. Your leadership will ensure that Requirements Analysis efforts are not just completed&mdash;but <b>executed with precision, aligned to mission priorities, and impactful to fleet readiness</b>. This is an opportunity to continue serving by shaping how the Navy prepares its Sailors for the future fight.</div>
Required Qualifications:
<ul><li>Bachelor&rsquo;s Degree in any discipline</li><li>
7+ years of professional experience, including program or requirements analysis<ul><li>
15+ years of Naval experience can be considered in lieu of a degree, with at least 7 of those years being professional program support or requirements analysis experience.</li></ul></li><li>
Active Secret Security Clearance</li><li>
Demonstrated experience supporting Navy Training Systems and Requirements Analysis efforts</li><li>
Working knowledge of NAVEDTRA guidance and OPNAVINST 1500.76 (series)</li><li>
Must be a US citizen</li></ul>
Desired Qualifications:
<div><b>
Preferred Qualifications</b></div><ul><li>
Advanced degree in <b>business, engineering, or technical field</b></li><li>
Extensive experience with <b>Navy Training Systems and MPT processes</b></li><li>
Surface Navy operational experience</li><li>
Experience supporting <b>NAVSEA, PMS 339, or similar acquisition programs</b></li><li>
Prior leadership or supervisory experience</li></ul><div><b>
Helpful Certifications</b></div><ul><li>
Project Management Professional (PMP)</li><li>
DAWIA Certification (Program Management or Life Cycle Logistics)</li><li>
Lean Six Sigma (Green/Black Belt)</li><li>
Certified ScrumMaster (CSM) or Agile certifications (preferred for process improvement)</li></ul>
Overview:
<div><b>
Overview</b></div><div>
Noblis and our wholly owned subsidiaries, Noblis ESI and Noblis MSD, take on some of the nation&rsquo;s toughest challenges, delivering advanced solutions to our customers&rsquo; most critical missions. We bring together leading scientific, engineering, and management expertise in a culture grounded in objectivity and collaboration, ensuring our work creates lasting impact across federal missions.</div><div></div><div><br>
We work with a broad range of government agencies in the defense, intelligence, and federal civilian sectors. Learn more and find opportunities at careers.noblis.org</div><div></div><div><b><br>
Why Work at Noblis</b></div><div></div><div><br>
At Noblis, we share a passion for excellence and innovation, and we create an environment where people can do meaningful work while maintaining the balance that keeps them energized and fulfilled. We seek out individuals with a natural curiosity and desire to collaborate and learn. We believe our people are our greatest strength, and we consistently seek exceptionally skilled, mission‑driven professionals who care deeply about doing work that enriches lives and makes our nation safer.</div><div></div><div><br>
Noblis has earned numerous workplace awards for our culture, our commitment to employee well‑being, and our dedication to meaningful, impactful work. We also maintain a drug‑free workplace.</div><div></div><div><i><br>
Remote/hybrid status is subject to change based on Noblis and/or government requirements.</i></div>
Commitment to Non-Discrimination:
<div>
All qualified applicants will receive consideration for employment without regard to race, color, ethnicity, sex, age, national origin, religion, physical or mental disability, pregnancy/childbirth and related medical conditions, veteran or military status, or any other characteristics protected by applicable federal, state, or local law.</div><div></div><div><br>
If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact us.</div><div>
EEO is the Law | E-Verify | Right to Work</div><br>
<br>
Total Rewards:
<div>
At Noblis we recognize and reward your contributions, provide you with growth opportunities, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, and work-life programs. Our award programs acknowledge employees for exceptional performance and superior demonstration of our service standards. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in our benefit programs. Other offerings may be provided for employees not within this category. We encourage you to learn more about our total benefits by visiting the Benefits page on our Careers site.</div><div></div><div><br>
Compensation at Noblis is determined by various factors, including but not limited to, the combination of education, certifications, knowledge, skills, competencies, and experience, internal and external equity, location, clearance level, as well as contract-specific affordability, organizational requirements and applicable employment laws. The projected compensation range for this position is based on full time status. For part time or on-call staff, compensation is proportionately adjusted based on hours worked. While monetary compensation is important, it's just one component of Noblis&rsquo; total compensation package.</div><br>
<br>
Posted Salary Range: USD $65,200.00 - USD $101,950.00 /Yr.</div>

Senior Project Management Analyst, RA

Explore 138+ Senior cyber security analyst in Washington this May. Find roles across top companies and apply now to boost your career.