Cybersecurity Consultant

Responsibilities

• Lead cyber risk management efforts across a portfolio of client applications.
• Manage end-to-end POA&M lifecycle, including creation, tracking, validation, and closure of identified security weaknesses.
• Prioritize remediation activities based on risk severity, compliance requirements, and operational impact.
• Conduct regular POA&M status reviews and coordinate with system owners and O&M teams to track milestone progress.
• Perform Business Impact Analyses (BIAs) to identify critical systems, functions, dependencies, and recovery time/objectives.
• Collaborate with stakeholders to validate system criticality and align with continuity and contingency planning requirements.
• Build and maintain strong working relationships with business, engineering, and security teams to validate fixes, resolve blockers, and support timely remediation.
• Prepare reports and briefings for leadership and federal oversight stakeholders.
• Provide cyber subject matter expertise during information security audits and assessments.
• Maintain and update BIA documentation in alignment with evolving system architecture and mission priorities.

Requirements

• Minimum of two (2) years of overall work experience.
• Experience in cybersecurity or IT risk management; candidates focused on cybersecurity risk management are preferred.
• Hands‑on experience with GRC platforms.
• Deep understanding of NIST SP 800‑53, FISMA requirements, and NIST SP 800‑37.
• Strong communication and analytical thinking; ability to manage multiple concurrent priorities and deadlines.
• Ability to obtain and maintain a Federal or DoD “PUBLIC TRUST”; must obtain approved adjudication prior to onboarding. Candidates with an active Public Trust or suitability and an active HHS/NIH clearance are preferred.

Qualifications

• Experience developing automated data pipelines or integrating APIs into Power BI dashboards.
• Knowledge of the MITRE ATT&CK framework and vulnerability prioritization methodologies (e.g., EPSS, CVSS v3).
• Prior experience supporting a federal agency or working in a public health environment.
• Certifications: Active CompTIA Security+ CE preferred; CISSP, CEH, or cloud‑related certifications are a plus.

Pay

Annual salary range: $85,000.00 – $141,000.00. Compensation decisions depend on skill sets, experience, training, security clearances, licensure, certifications, and other business and organizational needs.

Benefits

• Medical, Rx, Dental & Vision Insurance
• Personal and Family Sick Time & Company Paid Holidays
• Discretionary variable incentive bonus (position may be eligible)
• Parental Leave and Adoption Assistance
• 401(k) Retirement Plan
• Basic Life & Supplemental Life
• Health Savings Account, Dental/Vision & Dependent Care Flexible Spending Accounts
• Short‑Term & Long‑Term Disability
• Student Loan PayDown
• Tuition Reimbursement, Personal Development & Learning Opportunities
• Skills Development & Certifications
• Employee Referral Program
• Corporate Sponsored Events & Community Outreach
• Emergency Back‑Up Childcare Program
• Mobility Stipend

Schedule

Travel required up to 25% of time.