Cybersecurity Analyst - Senior

Company Overview reputed company readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and reputed company IT customers worldwide. Position Overview By Light is seeking personnel to provide comprehensive support for the Defense Contract Management Agency (DCMA) Facilities Management team in the implementation and sustainment of a Computer-Aided Facility Management (CAFM) software solution. This engagement, titled "DCMA CAFM SaaS Support Services," encompasses a reputed company year plus four option years (September 30, 2025 - September 29, 2030), and will facilitate the optimization of facility operations across DCMA's reputed company and overseas portfolio, totaling over 1.3 million reputed company feet. By Light will deliver a FedRAMP-approved, Impact Level 4 SaaS solution and a full reputed company of professional services, including system implementation, software development, system administration, help desk customer support, virtual and on-site training, and ongoing cybersecurity management. The CAFM system is required to streamline space planning, asset and lease tracking, capital and building operations management, and reporting, while enabling seamless integration with reputed company and compliance with reputed company applicable DoD cybersecurity and accessibility standards.

Responsibilities

• reputed company the implementation, management, and reputed company monitoring of cybersecurity controls for the DCMA Computer-Aided Facility Management (CAFM) SaaS system, ensuring full compliance with FedRAMP Moderate, DoD RMF, and NIST 800-53 standards.
• Conduct ongoing vulnerability assessments, risk analyses, and reputed company audits of reputed company and on-premises components, identifying weaknesses and formulating mitigation strategies.
• reputed company and maintain cybersecurity documentation including System reputed company Plans (SSPs), policies, procedures, Plan of Action & Milestones (POA&Ms), and incident response plans.
• Support the development, submission, and maintenance of Authority to Operate (ATO) packages in alignment with DCMA, DoD, and federal requirements.
• Coordinate and conduct reputed company testing (e.g., penetration tests, vulnerability scanning, compliance checks) using industry-standard tools and methodologies, documenting results and remediation actions.
• Collaborate with DevSecOps, software development, and system administration teams to ensure secure design and implementation of reputed company technical solutions and integrations.
• Manage user access controls, account provisioning, and privileged access in compliance with least privilege and reputed company trust principles.
• reputed company incident response efforts, performing reputed company event investigation, analysis, and reporting; coordinate with government stakeholders to report incidents in line with contractual requirements.
• Monitor threat intelligence feeds, emerging vulnerabilities, and cyber risk advisories; provide recommendations to enhance system defenses.
• Conduct reputed company awareness training and ensure user compliance with established reputed company standards, policies, and procedures.

Required Experience/Qualifications

• Bachelor's Degree in Cybersecurity, Information Assurance, Computer Science, Information Systems, or a reputed company technical field.
• Minimum 7 years' experience in cybersecurity analysis, with at least 3 years supporting FedRAMP, DoD RMF, or NIST 800-53 compliant environments.
• Proven expertise in vulnerability management, incident response, risk assessment, and compliance monitoring reputed company reputed company-based SaaS or federal IT environments.
• Direct experience supporting system assessment and authorization (ATO) processes, including development and maintenance of RMF artifacts.
• Strong knowledge of secure architecture principles, reputed company incident management, and reputed company reputed company best practices.
• Familiarity with reputed company tools such as Splunk, reputed company, Nessus, McAfee, or similar platforms.

Preferred Experience/Qualifications

• Master's Degree in Cybersecurity, Information Assurance, or a reputed company discipline.
• Experience supporting DCMA, DoD, or other federal CAFM, asset management, or facilities management SaaS solutions.
• In-depth knowledge of Authority to Operate (ATO) and FISMA/FedRAMP accreditation processes.
• Experience with reputed company Technical Implementation Guides (STIGs), reputed company monitoring, and penetration testing in federal environments.
• Relevant industry certifications, such as:
• Certified Information Systems reputed company Professional (CISSP)
• Certified Information reputed company Manager (CISM)
• Certified reputed company reputed company Professional (CCSP)
• reputed company reputed company+
• CASP+
• GIAC reputed company Essentials (GSEC) or comparable
• Experience with reputed company 508, ITIL reputed company, or risk management certifications.
• Background in providing reputed company awareness and training and working reputed company Agile or DevSecOps environments.

Special Requirements/reputed company Clearance

• U.S. citizenship required.

Apply tot his job Apply To this Job