Cybersecurity Analyst

Edgewater Federal Solutions, Inc.•Washington, DC

4d•$190,000 - $200,000•Onsite

About The Position

The Cybersecurity Analyst supports day-to-day operations with strong experience in the NIST Risk Management Framework (RMF) to also support the security authorization, compliance, and continuous monitoring of federal information systems. This role provides technical guidance to management, system owners, and engineering teams on cybersecurity risk, control implementation, and authorization activities. In this position, the Cybersecurity Analyst will develop and maintain RMF documentation, conduct risk and vulnerability assessments, support security control assessments, and help systems obtain and maintain an Authority to Operate (ATO). The position requires knowledge of FISMA, NIST publications, federal cybersecurity policies, and agency-specific guidance, along with sound judgment, strong technical writing, and the ability to translate requirements into actionable security practices.

Requirements

Bachelor’s degree in IT, Computer Science, or a related field preferred; equivalent combination of education, certifications, and relevant experience will be considered.
Active Top Secret Clearance with ability to obtain a SCI.
3–5 years of Cybersecurity experience supporting RMF, compliance, assessments, or ISSO functions in federal or regulated environments.
Knowledge of NIST SP 800-37/53, FISMA, FIPS 199/200, and related federal guidance.
Knowledge of DISA CCIs and NIST SP 800-53 mapping.
Experience maintaining RMF documentation, authorization packages, and continuous monitoring.
Ability to assess risk, interpret scans, prioritize remediation, and communicate technical risk.
Familiarity with vulnerability management, SIEM, endpoint security, CDM, and eMASS or similar platforms preferred.
Strong technical writing, documentation, presentation, audit, and executive reporting skills.
Ability to work independently, prioritize tasks, and collaborate across teams.

Nice To Haves

CompTIA Security+ CE
ISC2 CGRC
CompTIA CySA+
CISSP or CISM
DoD Manual 8140.3
IAT Level II

Responsibilities

Lead RMF life-cycle activities, including system categorization, control selection and validation, assessments, authorization, and continuous monitoring.
Develop and maintain RMF documentation, including SSPs, SAPs/SARs, POA&Ms, risk assessments, PIAs, and continuous monitoring artifacts.
Conduct risk assessments, control gap analyses, and vulnerability reviews; evaluate impact and recommend risk-based remediation.
Coordinate with system owners, network engineers, and administrators to implement and document NIST SP 800-53 controls and support daily operations.
Support the ATO process by preparing authorization packages, tracking findings, coordinating assessor requests, and briefing stakeholders on residual risk and remediation.
Monitor compliance with FISMA, NIST, agency policies, and contractual cybersecurity requirements.
Support internal and external audits through evidence collection, control mapping, interviews, and corrective action tracking.
Analyze vulnerability scans, security tool outputs, and operational data to identify trends, validate control effectiveness, and support continuous diagnostics and mitigation.
Provide cybersecurity guidance and training to system owners, administrators, and users on requirements, secure practices, and documentation.
Develop cybersecurity policies, procedures, standards, and governance processes to strengthen compliance and risk management.