Cybersecurity Consultant - NIST CSF Testing & Compliance with State Client

Work Location: Remote within the United States. Periodic travel may be required based on project needs.

About the Role

We are seeking a Cybersecurity Consultant to support enterprise cybersecurity assessments, NIST Cybersecurity Framework (CSF) compliance reviews, vulnerability testing, and independent validation activities. The consultant will support cybersecurity audit efforts by performing technical assessments, analyzing security controls, documenting findings, and providing actionable recommendations.

Responsibilities

• Perform cybersecurity assessments, control validation, vulnerability scans, and technical compliance reviews.
• Conduct ground-truth testing across systems, networks, endpoints, applications, APIs, cloud platforms, and security configurations.
• Develop and execute testing strategies, procedures, test plans, scripts, and evidence collection activities.
• Evaluate cybersecurity controls against NIST CSF, security standards, and compliance requirements.
• Analyze vulnerability findings, remediation plans, logs, and security data to identify risks and improvement opportunities.
• Support penetration testing, configuration assessments, incident review, and security validation activities.
• Prepare technical reports, findings summaries, root cause analyses, and executive-level recommendations.
• Provide cybersecurity subject matter expertise and support knowledge transfer activities.
• Maintain documentation, testing evidence, project status reports, and deliverables.

Requirements

• 5+ years of experience in cybersecurity assessments, compliance reviews, security auditing, or technical security consulting.
• Experience with NIST Cybersecurity Framework (CSF), cybersecurity risk assessments, and control testing.
• Hands-on experience with vulnerability scanning, penetration testing, configuration assessments, and security validation.
• Experience supporting government, public sector, or highly regulated environments.
• Ability to analyze technical findings and present recommendations to senior leadership.
• Experience handling sensitive data and security-related documentation.

Preferred Qualifications

• CISSP
• CISA
• CEH
• PMP
• Security+ or other relevant cybersecurity certifications

Skills

• NIST CSF, cybersecurity controls assessment, risk management
• Vulnerability assessment tools
• Penetration testing methodologies
• Network, application, endpoint, and cloud security assessments
• Security documentation and reporting