Cybersecurity Analyst

Position Overview

Maximus is seeking a Cybersecurity Analyst to support a federal client in maintaining compliance and strengthening the security posture of mission-critical systems. In this role, you will ensure adherence to government security requirements, manage Plans of Action and Milestones (POA&Ms), and support ongoing risk and vulnerability management activities vital to safeguarding critical systems and data in defense of our Homeland.

Key Responsibilities

• Serve as the primary point of contact for security compliance activities, collaborating with stakeholders to track and resolve security concerns.
• Manage and maintain POA&Ms, ensuring timely remediation of findings and alignment with government and contract requirements.
• Support vulnerability management efforts by running security scans, reviewing scan results, tracking remediation activities, and verifying closure of findings.
• Conduct risk management activities including risk assessments, risk analysis, and documenting risk mitigation strategies.
• Perform compliance reviews to ensure systems adhere to federal regulations, contract requirements, and applicable frameworks (e.g., NIST 800-53, RMF).
• Assist in preparing and maintaining security documentation such as System Security Plans (SSPs), assessment reports, and risk analyses.
• Collaborate with technical teams to validate security controls, provide compliance guidance, and ensure mission success.
• Participate in incident response and after-action reviews, documenting lessons learned and compliance impacts.
• Develop and deliver compliance reports and metrics for leadership, federal stakeholders, and auditors.
• Contribute to security awareness and training initiatives to promote compliance across operational teams.

Required Qualifications

• Active Secret clearance required.
• Only U.S. Citizens are eligible; candidates with dual citizenship cannot be considered.
• 7+ years of experience in security compliance, vulnerability management, or a related cybersecurity field.
• 4+ years of experience in managing and tracking POA&Ms within government contracting environments.
• 4+ years of experience with federal security frameworks, policies, and requirements (e.g., FISMA, NIST RMF).
• 4+ years of experience with vulnerability management processes and tools.
• 4+ years of experience conducting risk assessments and risk analysis.
• Strong written and verbal communication skills, with the ability to prepare detailed compliance documentation and reports.
• Candidates must reside within a commutable distance for daily onsite work and meet recall/on-call requirements in a 24x7x365 environment.

Preferred Qualifications

• Certifications such as CISSP, CISM, CAP, or similar in the security field.
• Experience with federal government contracts, preferably under Homeland Security.
• Recent DHS experience in security compliance, risk management, or assessment activities.
• Familiarity with security tools such as antivirus software, vulnerability scanners, access control systems, endpoint protection, PKI certificate management, logging/SEIM, and DLP solutions.

Benefits & Perks

• Compensation is determined by factors such as job location, education, training, and experience, and is part of a comprehensive package.
• Health insurance coverage
• Life and disability insurance
• Retirement savings plan
• Paid holidays and paid time off