Senior Cybersecurity Analyst

Alexandria Insights•Stafford, VA

2d•$110,000 - $130,000•Onsite

About The Position

Senior Cybersecurity Analyst – Stafford, VA (This is not a remote position) We are seeking a highly skilled Senior Cybersecurity Analyst to support tactical communications and electronic systems within a fast-paced Department of Defense (DoD) acquisition program office. In this role, you will serve as the primary cybersecurity advisor to the Program Manager’s Lead for Cybersecurity, shaping cyber strategy, system security posture, and acquisition decisions across the program’s lifecycle. You will also directly support the Government Information System Security Manager (ISSM) in all cybersecurity planning, documentation, and risk management activities. This position is ideal for a cybersecurity professional with deep experience in DoD 5000-series acquisition, system security engineering, and cyber-focused participation in technical reviews (SRR, SFR, PDR, CDR, TRR, SVR). Alexandria Insights, a Service-Disabled Veteran-Owned Small Business (SDVOSB), was recently named one of The Washington Post’s Top 250 Workplaces in the Washington, D.C. Metro area—ranking #3 out of 98 in the midsize company category! We are dedicated to helping our customers solve meaningful problems through the effective and efficient use of technology. If you're self-motivated, entrepreneurial, and hard-working, and you're looking to join a growing small company with big opportunities, we encourage you to apply. Submit your resume today and take the next step in your career with one of the region’s top-ranked employers. Alexandria Insights is an EEO/AA/Disability/Veterans Employer. We consider applicants for all positions without regard to race, color, religion, creed, gender, marital status, veteran status, national origin, age, sexual orientation, disability, or any other legally protected status. We also provide reasonable accommodations for individuals who are unable to use the online system due to a disability.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Systems Engineering, or related technical discipline.
8+ years of cybersecurity or information assurance experience supporting DoD programs.
Demonstrated experience supporting RMF activities and working directly with a Government ISSM or A&A authority.
Strong knowledge of DoD acquisition processes, including 5000-series lifecycle documentation, milestone gate reviews, and cybersecurity integration into program planning.
Hands-on experience with NIST SP 800-53, DoDI 8510.01 (RMF), and STIG compliance.
Proficiency in ACAS/Nessus, eMASS, HBSS, and Microsoft 365 workflows.
Technically proficient in system hardening, Windows security configurations, GPOs, and registry controls.
Active DoD 8570 IAM Level III certification (CISSP, CISM, GSLC, CASP+).
Active SECRET clearance strongly preferred; TS is a significant plus.

Nice To Haves

Experience applying cybersecurity requirements to DoD engineering technical reviews (SRR → SVR).
Hands-on experience supporting test events, DT/OT, fielding, or integration events from a cyber perspective.
Understanding of tactical communications systems, sensors, or other deployed electronic systems.
Familiarity with CM processes and digital engineering environments (CMPro, SharePoint, Teams).
Knowledge of secure software/hardware integration in tactical or constrained environments.

Responsibilities

Serve as the senior cybersecurity advisor to the PM’s Cybersecurity Lead, influencing acquisition planning, requirements development, milestone decisions, and lifecycle documentation from a cybersecurity perspective.
Partner with the Government ISSM to plan and execute RMF activities and maintain cybersecurity compliance across multiple systems and acquisition phases.
Lead the development, review, and sustainment of RMF artifacts, including: – System Security Plans (SSPs) – Authorization Boundary Diagrams – Privacy Impact Assessments (PIAs) – Ports, Protocols, and Services Management (PPSM) – Plan of Action and Milestones (POA&Ms)
Provide cyber-focused support during DoD 5000 technical reviews, ensuring system designs incorporate cybersecurity requirements, controls, and architectural risk mitigations. Reviews include: – SRR, SFR, PDR, CDR, TRR, FCA/PCA, and SVR
Conduct vulnerability assessments using ACAS/Nessus and coordinate remediation with engineering teams and vendors.
Apply IAVA, STIG, and hardening procedures to tactical and enterprise systems, particularly Windows-based platforms.
Shape secure system architectures and cybersecurity policies consistent with DoD, NIST, and program-specific standards.
Contribute cybersecurity inputs to Configuration Management (CM) processes, change control decisions, and digital thread repositories.
Support test events, engineering evaluations, fielding activities, and secure integration of software/hardware systems.
Mentor junior analysts and engineers, developing program-wide cyber awareness and best practices.
Deliver clear, actionable briefings and risk communications to program leadership and government stakeholders.