Cybersecurity Analyst

OSI VISION LLC • Fort Lee, VA

6d

About The Position

The Cybersecurity Analyst will serve as a technical subject matter expert supporting the cybersecurity evaluation of products, systems, and emerging technologies for a Federal Government defense program. The position will review cybersecurity assessment reports and supporting technical evidence, evaluate potential vulnerabilities and risks, and provide technical recommendations regarding security requirements, risk mitigation, and technical acceptance. The Cybersecurity Analyst will assess cybersecurity considerations involving embedded systems, software, firmware, wireless communications, networking, encryption, authentication, supply chain security, and related technologies. This role requires strong technical judgment and the ability to interpret complex cybersecurity assessment data and communicate findings effectively to Government personnel and other program stakeholders.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, Information Systems, or a related technical discipline.
• Active Secret security clearance.
• Demonstrated knowledge of cybersecurity principles applicable to embedded systems, software, firmware, wireless communications, networking, encryption, authentication, supply chain security, and related technologies.
• Experience interpreting cybersecurity assessment methodologies, penetration testing results, vulnerability assessments, software assurance evaluations, firmware analyses, and other technical assessment data.
• Demonstrated experience applying Federal cybersecurity standards and security controls, including National Institute of Standards and Technology (NIST) Special Publication 800-53.
• Knowledge of cybersecurity supply chain risk management principles, including NIST SP 800-161 or comparable Federal guidance.
• Experience supporting or applying the Department of Defense Risk Management Framework (RMF), including activities associated with system authorization and Authority to Operate processes.
• Ability to evaluate complex technical evidence, identify cybersecurity vulnerabilities and risks, assess mitigation strategies, and develop technically sound recommendations.
• Strong analytical, technical writing, documentation, and communication skills.
• Ability to effectively communicate complex cybersecurity issues to technical and non-technical Government stakeholders.

Nice To Haves

• Five or more years of practical cybersecurity experience.
• Previous cybersecurity experience supporting Department of Defense or other Federal Government programs.
• Experience evaluating cybersecurity risks associated with embedded technologies, connected devices, communications systems, or other mission-critical systems.
• Experience with vulnerability assessment, penetration testing, software assurance, firmware analysis, or cybersecurity testing methodologies.
• Familiarity with Federal supply chain risk management, system security engineering, or technology assessment programs.
• Relevant cybersecurity certifications such as CISSP, Security+, CySA+, CASP+/SecurityX, CEH, or comparable industry certifications.

Responsibilities

• Serve as a technical subject matter expert supporting cybersecurity evaluations of products, systems, components, and candidate technologies.
• Provide technical expertise and advisory support regarding cybersecurity requirements, technical standards, risk management, and assessment methodologies.
• Evaluate cybersecurity considerations involving embedded systems, software, firmware, wireless communications, networking, encryption, authentication, supply chain security, and related technologies.
• Interpret penetration testing results, vulnerability assessments, software assurance evaluations, firmware analyses, security test results, and other technical assessment data.
• Review cybersecurity assessment reports, technical documentation, test evidence, and supporting materials for completeness, technical sufficiency, and adequacy.
• Identify vulnerabilities, threats, attack vectors, weaknesses, and residual risks that could affect mission operations, system availability, information security, operational resilience, or national security objectives.
• Develop technical recommendations addressing cybersecurity findings, risk mitigation strategies, assessment requirements, security controls, and technical acceptance considerations.
• Evaluate remediation plans and supporting evidence to determine whether identified cybersecurity vulnerabilities and risks have been sufficiently mitigated.
• Apply applicable Federal cybersecurity statutes, policies, directives, frameworks, and technical standards to cybersecurity assessments and recommendations.
• Provide technical consultation to Government personnel, program leadership, technical teams, and other stakeholders on cybersecurity issues and risk considerations.
• Support cybersecurity risk assessments involving hardware, software, firmware, communications systems, and technology supply chains.
• Monitor emerging cybersecurity threats, vulnerabilities, attack techniques, technologies, and policy developments relevant to defense systems and emerging technologies.
• Recommend improvements to cybersecurity assessment processes, technical evaluation methodologies, risk mitigation practices, and program procedures.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior