Position Details

Type Full-Time

Experience mid

Exp. Years 5-8 years

Education 5–8 years of information security or cyber risk

Category Cybersecurity

About this role

This role involves conducting security control assessments and supporting federal cybersecurity compliance efforts, focusing on NIST standards and vulnerability management.

Key Responsibilities

Conduct security control assessments
Review system documentation
Perform risk analysis
Draft assessment deliverables
Coordinate with stakeholders

Technical Overview

Focuses on federal security frameworks, security assessment methodologies, and compliance tools like ServiceNow, Archer, and eMASS, with expertise in security documentation and vulnerability analysis.

Ideal Candidate

The ideal candidate is a mid-level cybersecurity analyst with 5+ years of experience in federal security frameworks, particularly NIST SP 800-53, FISMA, and RMF. They should have hands-on experience with security assessments, vulnerability analysis, and federal compliance tools, and be capable of working independently in a remote setting.

Must-Have Skills

NIST SP 800-53 security control testingDevelopment of SAPsSSPsSARsPOA&MsEvidence collectionRisk identificationFISMA and RMF compliance

Nice-to-Have Skills

FedRAMPCloud AssessmentGRC toolsVulnerability analysisSecurity documentation

Tools & Platforms

ServiceNowQmulosArchereMASS

Required Skills

NIST SP 800-53FISMARMFsecurity control assessmentsSAPsSSPsSARsPOA&Msvulnerability analysis

Hard Skills

NIST SP 800-53FISMARMFSecurity Control AssessmentsSAPsSSPsSARsPOA&MsVulnerability AnalysisRisk ManagementCybersecurityFederal IT SecurityGRC ToolsServiceNowQmulosArchereMASS

Soft Skills

Analytical ThinkingAttention to DetailCommunicationStakeholder CoordinationProblem-SolvingTeamworkCompliance Focus

Industry & Role

Industry Government/Public Sector

Job Function Support federal cybersecurity compliance and security assessments

Role Subtype Cybersecurity Analyst

Tech Domains Cybersecurity, Active Directory, Microsoft 365, Azure, Windows Server, ITSM / ServiceNow

Clearance & Visa

Clearance Required None

Visa Sponsorship No

Keywords for Your Resume

NIST SP 800-53FISMARMFsecurity control assessmentsSAPsSSPsSARsPOA&Msvulnerability analysisrisk managementcybersecurityfederal it securitygrc toolsserviceNowqmulosarcheremass

Deal Breakers

Lack of federal cybersecurity experience, No experience with NIST SP 800-53 or FISMA, Inability to work independently remotely, No experience with GRC tools, No security assessment background

Apply for this Position →

Get matched to jobs like this

Luna finds roles that fit your skills and career goals — no endless scrolling required.

Create a Free Profile

Journeyman Information Security Analyst

Get matched to jobs like this