Cybersecurity Analyst

Description & Requirements

Maximus is seeking a Cybersecurity Analyst to support a federal client in maintaining compliance and strengthening the security posture of mission-critical systems.

As part of our dedicated team, the Cybersecurity Analyst will ensure adherence to government security requirements, manage Plans of Action and Milestones (POA&Ms), and support ongoing risk and vulnerability management activities vital to safeguarding critical systems and data in defense of our Homeland.

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS033, T3, Band 6

Job-Specific Essential Duties and Responsibilities:

- Serve as the primary point of contact for security compliance activities, collaborating with stakeholders to track and resolve security concerns.
- Manage and maintain POA&Ms, ensuring timely remediation of findings and alignment with government and contract requirements.
- Support vulnerability management efforts, including running security scans and reviewing scan results, tracking remediation activities, and verifying closure of findings.
- Conduct risk management activities including risk assessments, risk analysis, and documentation of risk mitigation strategies.
- Conduct compliance reviews to ensure systems adhere to federal regulations, contract requirements, and applicable frameworks (e.g., NIST 800-53, RMF).
- Assist in preparing and maintaining security documentation, including System Security Plans (SSPs), assessment reports, and risk analyses.
- Collaborate with technical teams across disciplines to validate security controls, provide compliance guidance, and ensure mission success.
- Participate in incident response and after-action reviews, documenting lessons learned and compliance impacts.
- Develop and deliver compliance reports and metrics for leadership, federal stakeholders, and auditors.
- Contribute to security awareness and training initiatives to promote compliance across operational teams.

- Other tasks as assigned.

Job-Specific Minimum Requirements:

- Candidates must have an active Secret Security Clearance.

- Additionally only U.S.

citizens who do not hold dual citizenship with other countries will be considered.

- 7+ years of experience

- Experience with vulnerability management tools - Tenable is strongly preferred.

Must be able to perform scans in addition to reading reports.

- Proven ability to manage and coordinate POA&Ms with internal and external stakeholders

- Ability to work on-site in Colorado Springs, CO.

Preferred Skills and Qualifications:

- Certifications in the security field such as CISSP, CISM, CAP, or similar.

- Experience with federal government contracts, with preference for contracts under Homeland Security.

- Recent DHS experience with security compliance, risk management, or assessment activities.

- Familiarity with security tools including antivirus software, vulnerability scanners, access control, endpoint protection, vulnerability managemen...