Cybersecurity SME/Cyber Analyst

Talteam Inc.•Washington, DC

About The Position

The Cybersecurity SME/Cyber Analyst supports cybersecurity assessment operations by enhancing capabilities and standard operating procedures, analyzing vulnerabilities, and reviewing program-level documentation. The role develops security evaluation test plans and procedures, researches and helps develop information security policies and guidance, and participates in or leads technical exchange meetings. It also conducts hands-on security testing, assesses risks, recommends countermeasures, coordinates security testing with other program organizations, and provides oversight of security-related support systems. The position ensures cybersecurity artifacts, assessments, and system configurations align with applicable federal requirements, including NIST SP 800-53 controls, FedRAMP baselines, and agency policies and directives. The role may brief leadership on action items and activity results.

Requirements

Bachelor's degree in Information Technology, Business Management, or a related field.
At least 8 years of cybersecurity experience.
Hands-on experience conducting comprehensive risk and vulnerability assessments.
Extensive knowledge of federal cybersecurity regulations, policies, and guidelines, including NIST and FISMA.
Experience developing and maintaining system- and enterprise-level information assurance documentation.
Ability to support security engineering activities and incorporate security requirements into system design, architecture, and configuration baselines throughout the systems lifecycle.
CISSP or an equivalent cybersecurity certification, such as Security+.
Active Secret clearance.

Nice To Haves

Demonstrated success supporting federal contracts.
Experience coordinating with stakeholders such as system owners, ISSOs, architecture teams, and cybersecurity leadership to validate system requirements, address information assurance concerns, and resolve compliance or security issues.
Strong analytical, written, and verbal communication skills, including the ability to explain technical risks and content to executive and government stakeholders.
Ability to collaborate and contribute to a team environment.

Responsibilities

Enhance capabilities and standard operating procedures for cybersecurity assessment operations.
Analyze vulnerabilities and review program-level documentation, including requirements specifications, system architecture and design documents, test plans, and security plans.
Develop and document security evaluation test plans and procedures.
Research, evaluate, and help develop information security policies and guidance.
Participate in or lead technical exchange meetings and document action items and results.
Brief leadership on the status of action items and activity results as needed.
Conduct hands-on security testing, analyze results, document risks, and recommend countermeasures.
Coordinate security testing with other program organizations.
Assess and calculate risk based on threats, vulnerabilities, and shortfalls uncovered in testing.
Identify mitigation countermeasures for threats, vulnerabilities, and shortfalls.
Oversee the design, development, and implementation of security-related support systems.
Support security engineering and ensure security requirements are incorporated into system design, architecture, and configuration baselines throughout the systems lifecycle.
Ensure compliance with federal cybersecurity regulations, including NIST, FISMA, and associated guidance.
Keep artifacts, assessments, and system configurations aligned with NIST SP 800-53 controls, FedRAMP baselines, and federal agency policies and directives.