Skip to main content
Arlo Solutions

Cybersecurity Analyst (Part-Time)

RemoteUnited States only
Published
Role
Security
Experience
Senior
Employment
Part-time
Salary not disclosed
Check eligibility

Open to US only. Set where you work from to check your eligibility.

No BS summary

Experienced part-time cybersecurity analyst with active DoD Secret Clearance, 5+ years supporting DoD cybersecurity programs, and RMF/NIST SP 800-53 Rev. 5 experience. Must support DSCA cybersecurity work, A&A activities, vulnerability management, STIGs, ACAS/Nessus, and RMF artifact writing.

Core skills

RMFNIST SP 800-53 Rev. 5ACAS

Required skills

ATOIATTATO-CSTIGNessus

Optional skills

CISSPCASP+Security+CISMCCSPCGRCCEHGIAC

What you'll do

  • Support implementation of the DoD Risk Management Framework (RMF) lifecycle.
  • Assist Government ISSMs with maintaining cybersecurity authorization packages.
  • Review and analyze cybersecurity documentation for completeness and compliance.
  • Perform cybersecurity policy research and interpretation.
  • Develop recommendations to reduce organizational cyber risk.
  • Assist with cybersecurity governance boards and risk review meetings.
  • Support cybersecurity strategy development.
  • Assist leadership with enterprise cybersecurity initiatives.
  • Support all six RMF Steps: Prepare, Categorize, Select, Implement, Assess, Authorize, Monitor.
  • Support Security Plans (SSPs).
  • Support Security Assessment Plans (SAPs).
  • Support Security Assessment Reports (SARs).
  • Support Risk Assessment Reports (RARs).
  • Support POA&M development.
  • Support Security Categorization.
  • Support Control inheritance analysis.
  • Support Reciprocity reviews.
  • Support Continuous Authorization activities.
  • Support Authorization package quality reviews.
  • Conduct or support Security Control Assessments (SCA).
  • Conduct or support Cybersecurity Readiness Assessments.
  • Conduct or support Gap Assessments.
  • Conduct or support Compliance Reviews.
  • Conduct or support Risk Assessments.
  • Conduct or support Technical Control Validation.
  • Conduct or support Architecture Reviews.
  • Conduct or support Cloud Security Reviews.
  • Conduct or support Zero Trust Assessments.
  • Assist in validating implementation of NIST SP 800-53 Rev. 5 security controls.
  • Support Enterprise Continuous Monitoring (ConMon) activities including POA&M tracking.
  • Support Enterprise Continuous Monitoring (ConMon) activities including vulnerability trend analysis.
  • Support Enterprise Continuous Monitoring (ConMon) activities including configuration management reviews.
  • Support Enterprise Continuous Monitoring (ConMon) activities including security control effectiveness reviews.
  • Support Enterprise Continuous Monitoring (ConMon) activities including monthly cybersecurity status reporting.
  • Support Enterprise Continuous Monitoring (ConMon) activities including audit log reviews.
  • Support Enterprise Continuous Monitoring (ConMon) activities including incident trend analysis.
  • Support Enterprise Continuous Monitoring (ConMon) activities including compliance metrics.
  • Support Enterprise Continuous Monitoring (ConMon) activities including risk dashboards.
  • Review ACAS/Nessus scan results.
  • Analyze STIG compliance.
  • Validate vulnerability remediation.
  • Track critical findings.
  • Perform risk prioritization.
  • Coordinate remediation activities.
  • Develop mitigation recommendations.
  • Support cybersecurity inspections.
  • Develop and maintain SSPs.
  • Develop and maintain SAPs.
  • Develop and maintain SARs.
  • Develop and maintain RARs.
  • Develop and maintain POA&Ms.
  • Develop and maintain Configuration Management Plans.
  • Develop and maintain Continuous Monitoring Strategies.
  • Develop and maintain Security Engineering documentation.
  • Develop and maintain Architecture Diagrams.
  • Develop and maintain Data Flow Diagrams.
  • Develop and maintain Standard Operating Procedures.
  • Develop and maintain Cybersecurity Briefings.
  • Develop and maintain Executive Reports.

What they require

  • Active DoD Secret Clearance.
  • Bachelor's degree in Cybersecurity, Computer Science, Information Assurance, Information Systems, Engineering, or related discipline.
  • Five or more years supporting DoD cybersecurity programs.
  • Experience implementing DoD RMF.
  • Experience with NIST SP 800-53 Rev. 5.
  • Experience supporting ATO/IATT/ATO-C activities.
  • Experience writing RMF artifacts.
  • Experience conducting security control validation.
  • Experience supporting vulnerability management.
  • Experience with STIG implementation.
  • Experience with ACAS/Nessus.
  • Strong written and verbal communication skills.
  • Ability to brief senior Government leadership.
  • Preferred: CISSP.
  • Preferred: CASP+.
  • Preferred: Security+.
  • Preferred: CISM.
  • Preferred: CCSP.
  • Preferred: CGRC (formerly CAP).
  • Preferred: CEH.
  • Preferred: GIAC certifications.
  • Preferred: Cloud security certifications (AWS, Azure, Google Cloud).
  • Preferred: Experience with Agile Authorization and Continuous Authorization.
  • Preferred: Experience supporting Cloud Service Providers (CSPs).
  • Preferred: Knowledge of Zero Trust Architecture.
  • Preferred: Experience supporting DevSecOps pipelines.
  • Preferred: Experience with AI-enabled systems and emerging technologies.

Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions.

IT Consulting
Salary not disclosed