Arlo Solutions
Cybersecurity Analyst (Part-Time)
RemoteUnited States only
- Role
- Security
- Experience
- Senior
- Employment
- Part-time
Salary not disclosed
Check eligibility
Open to US only. Set where you work from to check your eligibility.
No BS summary
Experienced part-time cybersecurity analyst with active DoD Secret Clearance, 5+ years supporting DoD cybersecurity programs, and RMF/NIST SP 800-53 Rev. 5 experience. Must support DSCA cybersecurity work, A&A activities, vulnerability management, STIGs, ACAS/Nessus, and RMF artifact writing.
Core skills
RMFNIST SP 800-53 Rev. 5ACAS
Required skills
ATOIATTATO-CSTIGNessus
Optional skills
CISSPCASP+Security+CISMCCSPCGRCCEHGIAC
What you'll do
- Support implementation of the DoD Risk Management Framework (RMF) lifecycle.
- Assist Government ISSMs with maintaining cybersecurity authorization packages.
- Review and analyze cybersecurity documentation for completeness and compliance.
- Perform cybersecurity policy research and interpretation.
- Develop recommendations to reduce organizational cyber risk.
- Assist with cybersecurity governance boards and risk review meetings.
- Support cybersecurity strategy development.
- Assist leadership with enterprise cybersecurity initiatives.
- Support all six RMF Steps: Prepare, Categorize, Select, Implement, Assess, Authorize, Monitor.
- Support Security Plans (SSPs).
- Support Security Assessment Plans (SAPs).
- Support Security Assessment Reports (SARs).
- Support Risk Assessment Reports (RARs).
- Support POA&M development.
- Support Security Categorization.
- Support Control inheritance analysis.
- Support Reciprocity reviews.
- Support Continuous Authorization activities.
- Support Authorization package quality reviews.
- Conduct or support Security Control Assessments (SCA).
- Conduct or support Cybersecurity Readiness Assessments.
- Conduct or support Gap Assessments.
- Conduct or support Compliance Reviews.
- Conduct or support Risk Assessments.
- Conduct or support Technical Control Validation.
- Conduct or support Architecture Reviews.
- Conduct or support Cloud Security Reviews.
- Conduct or support Zero Trust Assessments.
- Assist in validating implementation of NIST SP 800-53 Rev. 5 security controls.
- Support Enterprise Continuous Monitoring (ConMon) activities including POA&M tracking.
- Support Enterprise Continuous Monitoring (ConMon) activities including vulnerability trend analysis.
- Support Enterprise Continuous Monitoring (ConMon) activities including configuration management reviews.
- Support Enterprise Continuous Monitoring (ConMon) activities including security control effectiveness reviews.
- Support Enterprise Continuous Monitoring (ConMon) activities including monthly cybersecurity status reporting.
- Support Enterprise Continuous Monitoring (ConMon) activities including audit log reviews.
- Support Enterprise Continuous Monitoring (ConMon) activities including incident trend analysis.
- Support Enterprise Continuous Monitoring (ConMon) activities including compliance metrics.
- Support Enterprise Continuous Monitoring (ConMon) activities including risk dashboards.
- Review ACAS/Nessus scan results.
- Analyze STIG compliance.
- Validate vulnerability remediation.
- Track critical findings.
- Perform risk prioritization.
- Coordinate remediation activities.
- Develop mitigation recommendations.
- Support cybersecurity inspections.
- Develop and maintain SSPs.
- Develop and maintain SAPs.
- Develop and maintain SARs.
- Develop and maintain RARs.
- Develop and maintain POA&Ms.
- Develop and maintain Configuration Management Plans.
- Develop and maintain Continuous Monitoring Strategies.
- Develop and maintain Security Engineering documentation.
- Develop and maintain Architecture Diagrams.
- Develop and maintain Data Flow Diagrams.
- Develop and maintain Standard Operating Procedures.
- Develop and maintain Cybersecurity Briefings.
- Develop and maintain Executive Reports.
What they require
- Active DoD Secret Clearance.
- Bachelor's degree in Cybersecurity, Computer Science, Information Assurance, Information Systems, Engineering, or related discipline.
- Five or more years supporting DoD cybersecurity programs.
- Experience implementing DoD RMF.
- Experience with NIST SP 800-53 Rev. 5.
- Experience supporting ATO/IATT/ATO-C activities.
- Experience writing RMF artifacts.
- Experience conducting security control validation.
- Experience supporting vulnerability management.
- Experience with STIG implementation.
- Experience with ACAS/Nessus.
- Strong written and verbal communication skills.
- Ability to brief senior Government leadership.
- Preferred: CISSP.
- Preferred: CASP+.
- Preferred: Security+.
- Preferred: CISM.
- Preferred: CCSP.
- Preferred: CGRC (formerly CAP).
- Preferred: CEH.
- Preferred: GIAC certifications.
- Preferred: Cloud security certifications (AWS, Azure, Google Cloud).
- Preferred: Experience with Agile Authorization and Continuous Authorization.
- Preferred: Experience supporting Cloud Service Providers (CSPs).
- Preferred: Knowledge of Zero Trust Architecture.
- Preferred: Experience supporting DevSecOps pipelines.
- Preferred: Experience with AI-enabled systems and emerging technologies.
Arlo Solutions (Arlo) is an information technology consulting services company that specializes in delivering technology solutions.
IT Consulting
Salary not disclosed