Arlo Solutions logo
Arlo SolutionsPosted 2 weeks ago

(715) Cybersecurity Analyst (Part-Time)

HybridArlington, Virginia, United States

Part TimeSmallInformation Technology Consulting

Job Summary

Implement the DoD Risk Management Framework (RMF) lifecycle by preparing Security Plans, Security Assessment Plans, and Security Assessment Reports. Conduct or support Security Control Assessments, Gap Assessments, and Cloud Security Reviews to validate NIST SP 800-53 Rev. 5 controls. Manage Enterprise Continuous Monitoring activities including POA&M tracking, vulnerability trend analysis, and monthly cybersecurity status reporting. Assist Government ISSMs with maintaining authorization packages and develop recommendations to reduce organizational cyber risk. This part-time role supports the Defense Support of Civil Authorities (DSCA) mission remotely or in a hybrid capacity in Arlington, VA. An active Secret Clearance is required.

Required Qualifications

  • Active DoD Secret Clearance
  • Bachelor's degree in Cybersecurity, Computer Science, Information Assurance, Information Systems, Engineering, or related discipline
  • (5) Five or more years supporting DoD cybersecurity programs
  • Experience implementing DoD RMF
  • Experience with NIST SP 800-53 Rev. 5
  • Experience supporting ATO/IATT/ATO-C activities
  • Experience writing RMF artifacts
  • Experience conducting security control validation
  • Experience supporting vulnerability management
  • Experience with STIG implementation
  • Experience with ACAS/Nessus
  • Strong written and verbal communication skills
  • Ability to brief senior Government leadership

Desired Qualifications

  • CISSP
  • CASP+
  • Security+
  • CISM
  • CCSP
  • CGRC (formerly CAP)
  • CEH
  • GIAC certifications
  • Cloud security certifications (AWS, Azure, Google Cloud)
  • Experience with Xacta, eMASS, or other Governance, Risk, and Compliance (GRC) platforms
  • Experience with Agile Authorization and Continuous Authorization
  • Experience supporting Cloud Service Providers (CSPs)
  • Knowledge of Zero Trust Architecture
  • Experience supporting DevSecOps pipelines
  • Experience with AI-enabled systems and emerging technologies

Hiring someone like this?

Get your role in front of qualified candidates on Sorce.

Get started

Apply to this job in one click with Sorce

Apply on Sorce