22 hours ago
Bethesda, MD, USAStaff+
Responsibilities
- Translate FISMA Moderate and NIST SP 800-53 Rev. 5 requirements into actionable technical controls and evidence.
- Support Risk Management Framework activities, security planning, control implementation, assessment readiness, and remediation tracking.
- Engineer access control, authentication, RBAC, audit logging, encryption, configuration management, secure communications, and data-protection safeguards.
- Integrate security scanning and compliance checks into the CI/CD process.
- Validate read-only interactions with authoritative source systems and safeguards against unauthorized data modification or external action.
- Support incident response, vulnerability management, secure configuration, and continuous monitoring.
- Coordinate with security, CIO/CISO stakeholders, platform teams, and program leadership.
Requirements
- Experience implementing cybersecurity controls for Federal information systems.
- Knowledge of FISMA, RMF, NIST SP 800-53 Rev. 5, secure software development, and DevSecOps.
- Experience with identity, RBAC, audit logging, encryption, vulnerability management, and security documentation.
- Ability to work across architecture, infrastructure, data, AI, and application teams.
- Ability to work in Government-approved environments, protect non-public Federal information, and comply with applicable NDA, security, privacy, records-management, and acceptable-use requirements.
- U.S. citizenship and ability to obtain and maintain Top Secret eligibility are required; active Top Secret clearance is highly preferred.
- Experience supporting Federal financial management, grants management, payment systems, award oversight, financial reporting, or financial stewardship is preferred.
- Familiarity with FedRAMP-authorized environments and FISMA Moderate / NIST SP 800-53 controls is preferred.
Benefits
- Competitive compensation with opportunities for bonuses.
- Employer-paid health care.
- Training and development funds.
- 401k match.
Categories
About Analytica
Analytica provides data and software engineering, analytics, and IT modernization consulting to U.S. government health, civilian, and national security agencies. Its services span cloud and enterprise data platforms (e.g., AWS, Databricks), DevSecOps, GIS, and AI/ML, delivered via government contracts. Founded in 2009 and headquartered in Washington, DC, the privately held firm is an SBA-certified 8(a) and HUBZone small business.