Senior Cybersecurity Analyst

Cherokee Federal

. Manage full lifecycle Risk Management Framework (RMF) activities in accordance with NIST Special Publication 800-37 .

Posted 10/13/2026full-timeRemote • Virginia • United StatesSenior💰 $130,000 - $135,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing the Risk Management Framework (RMF) in compliance with NIST standards, including the development and maintenance of security authorization documentation. Proficient in conducting risk assessments and collaborating with stakeholders to ensure continuous compliance and effective risk management.

Highest-signal resume keywords

Risk Management Framework (RMF) ImplementationNIST SP 800-53 Rev. 5 Security ControlsFedRAMP Authorization ExperienceCISSP, CISM, or CAP CertificationPublic Trust Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Risk AssessmentSecurity Authorization DocumentationNIST SP 800-37NIST SP 800-30FISMA KnowledgeFederal Cloud Security RequirementsVulnerability ScanningContinuous MonitoringCybersecurity Policy DevelopmentEnterprise-Level Cybersecurity Initiatives

Soft Skills

Effective CommunicationStakeholder EngagementCollaboration with Technical TeamsLeadership Engagement

Tools & Technologies

ServiceNowCSAMAtlassian ConfluenceJIRAMicrosoft 365

Certifications & Qualifications

CISSPCISMCAP

Industry Keywords

Federal Risk Management FrameworkFedRAMPZero Trust StrategyPublic Trust ClearanceCybersecurity Compliance

Tech Stack

Tools & technologies

CloudCyber SecurityServiceNow

About the role

Key responsibilities & impact

Manage full lifecycle Risk Management Framework (RMF) activities in accordance with NIST Special Publication 800-37
Develop, review, and maintain security authorization documentation, including SSPs, SAPs, SARs, and POA&Ms
Review and assess FedRAMP authorization packages and package updates
Monitor ATO packages in the FedRAMP Secure Repository
Communicate with system owners, ISSOs, Cloud Service Providers, and security stakeholders regarding significant system changes and continued compliance
Evaluate and validate implementation of NIST SP 800-53 Rev. 5 security controls, including inherited and agency-implemented controls
Conduct risk assessments using methodologies consistent with NIST SP 800-30
Provide risk analysis and recommendations to Authorizing Officials and senior stakeholders
Support continuous monitoring and ongoing authorization activities
Review vulnerability scans, track POA&Ms, and coordinate remediation efforts
Collaborate with system owners, security personnel, program offices, and senior stakeholders
Perform other job-related duties as assigned
Report to the Cybersecurity Oversight and Compliance Lead / Program Manager

Requirements

What you’ll need

Bachelor’s degree in Cybersecurity, Information Technology, Public Policy, or related discipline (or equivalent experience)
Professional certification(s) such as CISSP, CISM, or CAP
Minimum of 7 years of progressive cybersecurity experience, including at least 4 years supporting federal RMF/A&A efforts
Demonstrated experience implementing the NIST Risk Management Framework
Knowledge of FISMA
Knowledge of the Federal Zero Trust Strategy (OMB M-22-09)
Familiarity with federal cloud security requirements and FedRAMP-authorized environments
Experience supporting Moderate and/or High impact systems
Experience with Microsoft 365 office applications
Ability to engage effectively with technical teams and executive leadership
Active Public Trust clearance or ability to obtain a Public Trust clearance
Must be a U.S. citizen or legal permanent resident; the posting also states 'Must be a US Citizen'
Must pass pre-employment qualifications of Cherokee Federal
Ability to work prolonged periods sitting at a desk and working on a computer
Preferred: Experience with ServiceNow, CSAM, and/or comparable GRC tools
Preferred: Familiarity with Atlassian Confluence and JIRA
Preferred: Experience contributing to enterprise-level cybersecurity policy initiatives
Preferred: Familiarity with federal responsible AI guidance, including Executive Order 13960, OMB M-25-21 and M-25-22
Preferred: Experience supporting federal research or grant-management systems

Benefits

Comp & perks

Up to a 6% 401(k) company match
Paid time off
Medical, dental, and vision insurance
Prescription drug coverage
Basic life and AD&D insurance
Supplemental life insurance options
Short-term and long-term disability coverage
Paid holidays
Employee Assistance Program (EAP)
Flexible Spending Account (FSA) and Health Savings Account (HSA) options
Professional development, training, and certification support
Voluntary accident, critical illness, and identity theft protection benefits