Cybersecurity Analyst - Intermediate

MBL Technologies•Washington, DC

1h•Remote

About The Position

MBL Technologies, Inc. is seeking an experienced Cybersecurity Analyst to support cybersecurity architecture, engineering, risk management, and authorization activities for a federal client. This individual will work with technical teams and government stakeholders to help ensure information systems and cloud environments meet applicable federal cybersecurity requirements and maintain an effective security posture. The ideal candidate has hands-on experience supporting federal cybersecurity programs, including security architecture and engineering, Assessment and Authorization (A&A), Authority to Operate (ATO), and Risk Management Framework (RMF) activities. The Cybersecurity Analyst will contribute to the design, implementation, assessment, and continuous improvement of security solutions across traditional IT and cloud environments.

Requirements

Minimum of 3 years of Information Security experience.
Demonstrated experience with security architecture and security engineering.
Experience supporting IT and cloud design, security, development, systems engineering, and implementation efforts.
Experience with cybersecurity and security solutions within federal and/or commercial environments.
Experience supporting federal Assessment and Authorization (A&A) and Authority to Operate (ATO) activities.
Knowledge and experience with cybersecurity architecture, engineering, and authorization requirements, including FedRAMP and RMF.
Strong understanding of applicable federal cybersecurity policies, processes, standards, and frameworks.
Ability to analyze technical and security requirements and communicate findings and recommendations effectively.
Strong written and verbal communication skills with the ability to collaborate across technical and non-technical teams.
Ability to obtain and maintain a High-Risk Public Trust clearance.
Bachelor’s degree in business administration - Business Management, Cybersecurity, Computer Science, Information Systems, Information Assurance, Information Security, Information Resource Management, or a related field.
Certification in one or more of the following: Information Assurance Technician (IAT) Level III, Information Assurance Management (IAM) Level III, Information Assurance System Architects and Engineers (IASAE) Level III.
IAT III, IAM III, or IASAE III certification may be substituted for the relevant bachelor’s degree requirement or four years of relevant experience, as permitted by the position requirements.

Nice To Haves

Experience supporting cybersecurity programs for federal government agencies.
Experience with cloud security and security engineering in complex enterprise environments.
Familiarity with federal cybersecurity governance, risk management, compliance, and authorization processes.
Experience developing or maintaining security documentation supporting A&A, ATO, RMF, or FedRAMP activities.
Ability to work effectively with government stakeholders, system owners, security teams, engineers, and other technical personnel.

Responsibilities

Support cybersecurity architecture, security engineering, and information assurance activities across federal information systems and cloud environments.
Assist with the design, implementation, assessment, and maintenance of cybersecurity solutions and security controls.
Support IT and cloud design, security, development, systems engineering, and implementation efforts throughout the system lifecycle.
Participate in federal Assessment and Authorization (A&A) and Authority to Operate (ATO) activities.
Support implementation and assessment of cybersecurity requirements in accordance with the Risk Management Framework (RMF) and Federal Risk and Authorization Management Program (FedRAMP).
Review system architectures, technical documentation, and security requirements to identify cybersecurity risks, gaps, and areas for improvement.
Assist with the development and maintenance of security documentation required to support authorization and compliance activities.
Work with system owners, engineers, developers, cybersecurity personnel, and other stakeholders to ensure security requirements are incorporated into system design and implementation.
Support assessments of security controls and remediation activities associated with identified vulnerabilities and compliance gaps.
Monitor and evaluate compliance with applicable federal cybersecurity policies, processes, standards, and security requirements.
Provide cybersecurity analysis, recommendations, and technical support to project teams and government stakeholders.
Support continuous improvement initiatives designed to strengthen system security, compliance, and overall cybersecurity posture.