Salesforce Cybersecurity Analyst (Remote)

Full-time

Leesburg, VA

About the position

We are seeking a highly skilled Cybersecurity Analyst to support federal government cybersecurity initiatives. The ideal candidate will have hands-on experience with CSAM (Cybersecurity Assessment and Management) or JCAM (Joint Cybersecurity Assessment Model), Zero-Trust (ZT) architecture, Authority to Operate (ATO) processes, and the Risk Management Framework (RMF). This role requires strong analytical and technical skills to ensure the security and compliance of federal information systems. The candidate must be a U.S. citizen, eligible to obtain public trust clearance, and willing to accept W2 employment.

Responsibilities

• Conduct cybersecurity assessments and manage compliance of federal information systems using CSAM or JCAM.
• Assist in the implementation and maintenance of Zero-Trust (ZT) security frameworks to improve overall system security posture.
• Support the ATO (Authority to Operate) process by preparing and reviewing documentation for system authorization and ensuring all security controls are in place.
• Apply the Risk Management Framework (RMF) to assess and manage cybersecurity risks across federal IT systems, ensuring adherence to federal standards and policies.
• Work closely with stakeholders to ensure compliance with federal cybersecurity standards and provide support for risk assessments, security controls, and audits.
• Conduct vulnerability assessments and assist in implementing mitigation strategies to reduce risk exposure.
• Collaborate with cross-functional teams to identify and address cybersecurity threats, vulnerabilities, and compliance issues.
• Provide expertise and support for continuous monitoring of security controls, incident response, and reporting.
• Assist with the development and maintenance of security documentation, including system security plans, security assessment reports, and other RMF-related artifacts.
• Participate in cybersecurity training and awareness programs for federal staff.

Requirements

• Education: Bachelor’s degree
• Experience: Proven experience with CSAM or JCAM tools for cybersecurity assessments and management.
• Knowledge: Deep understanding of Zero-Trust (ZT) architecture and its application in a federal government context.
• Security Compliance: Strong knowledge of RMF (Risk Management Framework) processes, ATO (Authority to Operate) procedures, and federal cybersecurity regulations.
• Security Clearance: Must be eligible to pass background and credit checks for Public Trust clearance.
• Citizenship: U.S. Citizen.
• W2 Employment: Must be willing to accept a W2 employment arrangement.

Nice-to-haves

• Experience working within the federal government’s cybersecurity frameworks and compliance requirements.
• Knowledge of current cybersecurity threats, vulnerabilities, and mitigation strategies.
• Familiarity with NIST (National Institute of Standards and Technology) cybersecurity standards and guidelines, especially NIST SP 800-53, SP 800-37, and NIST SP 800-171.
• Strong analytical and problem-solving skills.
• Excellent communication skills, with the ability to collaborate effectively across teams and departments.
• Experience with cybersecurity tools and technologies, including vulnerability scanning, penetration testing, and security monitoring.

Benefits

• Competitive compensation package based on experience.
• Remote work options may be available depending on project requirements.