Information Assurance Senior Cyber Security Analyst (1099, $40/hr)

Divray Koves, LLC is a Service-Disabled Veteran-Owned Small Business providing strategic consulting, data management, and IT services to federal clients. The Information Assurance Senior Cyber Security Analyst supports federal information security programs through NIST RMF and ATO processes, GRC tools, security documentation, risk management, assessments, and audit readiness.

Responsibilities:

• Work within the NIST Risk Management Framework (RMF) and Authorization to Operate (ATO) processes for federal systems
• Support security control assessments, including self-assessments, SCAs, and third-party assessments and audits
• Use GRC tools (e.g., eMASS) to manage security controls, evidence, POA&Ms, and compliance reporting
• Develop and maintain security documentation: policies, procedures, standards, guidelines, and system security artifacts
• Contribute to vulnerability management processes and risk mitigation strategies
• Collaborate with technical and non-technical stakeholders to track issues, status, and audit readiness

Requirements:

• U.S. Citizenship required; ability to obtain and maintain a Public Trust clearance
• Working knowledge of NIST RMF and ATO processes
• Understanding of NIST SP 800-53 Rev 5 controls
• Hands-on experience with GRC tools (e.g., eMASS) and security documentation
• Experience with security assessments, audits, and vulnerability management
• Approximately 10 years of relevant experience (a combination of education and experience will be considered)
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems/Technology, or a related discipline preferred
• Familiarity with enterprise security tools, network topologies, and the implementation of cybersecurity regulations