Cybersecurity Analyst, RMF & ATO

The Cybersecurity Analyst provides cybersecurity, information assurance, risk management, and compliance support across Digital Services initiatives. The role supports Authorization to Operate (ATO) activities, continuous monitoring, security assessments, vulnerability management, and implementation of federal cybersecurity requirements while collaborating with engineering, architecture, product, infrastructure, and program teams throughout the solution lifecycle. The Cybersecurity Analyst will serve as the Information System Security Officer (ISSO) for assigned federal systems and environments.

This position contributes to cybersecurity governance, develops and maintains security documentation, supports security assessments and audits, and helps ensure digital products, cloud environments, and enterprise technology solutions meet applicable federal security and privacy requirements.

Essential Job Functions

Cybersecurity Advisory & Secure Solution Delivery

• Provide cybersecurity and privacy subject matter expertise across digital products, cloud services, enterprise applications, AI initiatives, and technology modernization efforts.
• Advise project teams on identity and access management, security controls, data protection, authorization boundaries, and cybersecurity best practices throughout the system development lifecycle.
• Review technical solutions, architectures, and proposed system changes to identify security risks and recommend appropriate mitigations.
• Collaborate with software engineering, infrastructure, architecture, product, and data teams to integrate security requirements into solution planning, development, testing, deployment, and operational support.
• Support alignment of technology initiatives with applicable federal cybersecurity, privacy, and risk management requirements.

Risk Management & Compliance

* Support identification, analysis, documentation, and tracking of cybersecurity and compliance risks across syste