FedRAMP Cloud Cybersecurity Analyst

Arctic Slope Regional Corporation - Quantico, VA

Full-time - Mid Level

Quantico, VA

Support Activities for Mining

About the position

The FedRAMP Cloud Cybersecurity Analyst position at ASRC Federal involves providing cybersecurity support for cloud-hosted systems in compliance with federal regulations. The role requires technical analysis, risk assessments, and the implementation of security improvements to ensure the integrity and security of cloud systems. The analyst will work closely with various teams to maintain compliance with FedRAMP and other cybersecurity frameworks while supporting ongoing authorization processes for cloud-based IT systems.

Responsibilities

• Support FedRAMP activities for cloud-hosted systems including documentation and compliance validation.
• Review and audit DCSA systems for compliance with Secure Cloud Computing Architecture (SCCA).
• Perform periodic cybersecurity control assessments of IT cloud systems and recommend improvements.
• Conduct Cyber Security Impact Assessments and Risk Assessments for cloud systems.
• Support the Information Security Continuous Monitoring Program for cloud-based IT systems.
• Collaborate with Third Party Assessment Organizations (3PAO) and participate in DISA Cloud Joint Verification Team (JVT) activities.
• Assist Product Managers and Program Management Office with cybersecurity audits and assessments.
• Participate in reviews of Information System Agreements and related documentation.
• Work with solution engineers to ensure compliance with FedRAMP PMO requirements.
• Assist with non-cloud systems authorization efforts utilizing the Risk Management Framework (RMF).
• Research and analyze COTS and GOTS products for compliance with security policies.

Requirements

• Minimum of three years of Cloud Cybersecurity experience.
• Ability to maintain TS/SCI clearance and access to DoD systems.
• Knowledge of Federal/DoD IT and Cloud security policies and configuration tools.
• Familiarity with cloud architectures (SaaS, PaaS, IaaS) and commercial cloud systems (AWS, Microsoft 365).
• Understanding of DOD cybersecurity standards including NIST 800-53 and FedRAMP.
• Excellent communication and interpersonal skills.

Nice-to-haves

• Bachelor's Degree in Cybersecurity or Information Systems Management preferred.
• Cloud certifications preferred.

Benefits

• Hybrid work schedule available depending on work demands.