Cybersecurity Analyst - Zero Trust

Dunhill Solutions•Ashburn, VA

2d•Onsite

About The Position

The Cybersecurity Analyst - Zero Trust evaluates a large federal agency's enterprise architecture, tools, and processes against CISA's Zero Trust Maturity Model. The analyst helps update the agency's Zero Trust Architecture (ZTA) Implementation Plan and Zero Trust Optimization Roadmap across Identity, Devices, Networks, Applications & Workloads, Data, Visibility & Analytics, Automation & Orchestration, and Governance. The role supports the ZTA Implementation & Optimization Integrated Project Team (IPT), builds consensus across working groups, tracks ZTA risks, issues, and metrics through to resolution, and maintains dashboards and documentation that communicate ZTA maturity progress by pillar. The analyst serves as a Zero Trust subject matter expert and strategic consultant to government leadership, helping incorporate applicable federal Zero Trust concepts and guidance. The role also evaluates technology and capability gaps, recommends tools and modernization initiatives, supports project planning and governance, and produces technical documentation, executive summaries, and briefing materials. This is an onsite position in Ashburn, Virginia, Monday through Friday, 8:30 a.m. to 5:00 p.m. Telework is not available. Applicants must be U.S. citizens with no dual citizenship and able to pass a federal background investigation to gain access to sensitive information. Compensation is $140,000–$165,000 per year.

Requirements

At least 5 years of professional experience in information assurance, cybersecurity, risk management, or compliance; alternatively, a bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field and 3 years of such experience.
One of the following certifications: ISC2 CISSP, ISACA CISM, ISACA CRISC, GIAC GCED, or CEH.
Experience with Zero Trust fundamentals.
Ability to work onsite in Ashburn, Virginia; telework is not available.
U.S. citizenship with no dual citizenship.
Ability to pass a federal background investigation to be granted access to sensitive information.

Nice To Haves

Demonstrated knowledge of OMB M-22-09 and the Zero Trust Architecture pillars, the CISA Zero Trust Maturity Model, the NIST Zero Trust Architecture model, and the DoD Zero Trust Reference Architecture.
Experience with risk assessments, NIST SP 800-37 Risk Management Framework, the NIST Cybersecurity Framework, and NIST SP 800-53 security controls.
Experience with POA&M management, security impact analysis of system design and configuration, and security policy writing.

Responsibilities

Serve as a Zero Trust subject matter expert and strategic consultant to government leadership.
Help incorporate Zero Trust concepts in accordance with OMB M-22-09, CISA's Zero Trust Maturity Model, NIST SP 800-207, the DoD Zero Trust Reference Architecture, and Executive Order 14028.
Evaluate enterprise architecture, tools, configurations, and standard operating procedures through a Zero Trust lens and identify opportunities for further adoption.
Identify technology and capability gaps, evaluate products, and recommend tools and technologies to mature Zero Trust capability levels.
Update the ZTA Implementation Plan and draft and update the Zero Trust Optimization Roadmap across all Zero Trust focus areas.
Draft and maintain the Security Modernization Strategy and support the ZTA IPT and working groups, including consensus-building.
Prioritize modernization initiatives; track ZTA risks, issues, and blockers; and develop and track security modernization metrics.
Maintain the Security Modernization / Zero Trust JIRA project board and an enterprise Integrated Master Schedule / Gantt chart.
Develop single-pane-of-glass BI dashboards tracking ZTA maturity by pillar.
Develop technical documentation, non-technical executive summaries, and briefing materials supporting security modernization efforts.