Cyber Security Analyst

Description

Pueo is seeking a Cyber Security Analyst to join our unique team of multidisciplined experts onsite in McLean, VA. This position focuses on driving meaningful security outcomes through vulnerability management, continuous monitoring, compliance support, and risk-informed decision-making.

The Cyber Security Analyst will be responsible for the following, but not limited to:

• Responsible for supporting the security and maintenance of information systems throughout the RMF lifecycle; from preparation through decommission in alignment with ICD, DIA, and DoD/DoW cybersecurity policies. 
• Focuses on executing RMF tasks while actively engaging with DIA ISSMs/SCAs, and client PMs/ISSOs teams to ensure security activities lead to meaningful outcomes.  
• Ensuring ISSOs remain focused on risk-reduction priorities, not just administrative tasks. 
• Helping stakeholders understand why certain vulnerabilities matter and how remediation improves the system's overall security posture. 
• Providing technical input and continuous monitoring support that contributes to measurable improvements in compliance and audit readiness. 
• Evaluate cybersecurity impacts of system changes, supports control implementation, and helps maintain accurate, actionable security documentation.
• Document vulnerabilities, misconfigurations, and issues clearly and thoroughly to support remediation planning and stakeholder understanding. 
• Use XACTA to manage risk assessments, security control evidence, POA&M tracking, and compliance status. 
• Monitor and track POA&M items, ensuring vulnerabilities identified in scans or audits are documented, mitigated, and closed appropriately with a focus on reducing repeat findings. 
• Collaborate with ISSMs, ISSOs, SCAs, PMs, and other partners by providing guidance, clarifications, and context that help them make informed decisions. 
• Represent cybersecurity standards and expectations in all engagements, reinforcing mission alignment and transparency.?    

Requirements

Minimum Required Qualification:  

• Top Secret Security Clearance with SCI eligibility. Ability to Pass CI Poly.  
• Bachelor's degree in cybersecurity, computer science, information technology, or a related field with 8 years of experience, or 12 years of relevant experience in lieu of a completed degree. 
• Obtain and maintain an IAT level II Certification in compliance with DoD 8570.01-M and DoD Directive 8140 Cyberspace Workforce Management. (ex: CySA+, Security+, GICSP, GSEC, CND, CCNA Security, SSCP).
• Strong interpersonal and communication skills to engage stakeholders and explain technical issues in a clear, mission focused way.
• Hands on experience interpreting vulnerability and compliance reports from XACTA, STIGs, ACAS, Prisma, Splunk, Trellix (HBSS), or similar tools.
• Solid analytical and problem-solving skills to identify root causes and recommend practical remediation steps.  

Desired Qualifications:  

• An active Top Secret security clearance with SCI eligibility and current CI poly.
• Sound knowledge of RMF, NIST 800 series, FIPS, SA&A processes, continuous monitoring, POA&M policies, and vulnerability/patch management.
• Experience using Cyber Risk Management Platforms (e.g., XACTA) for workflow automation, compliance tracking, and RMF execution. 
• Some experience leading or contributing to security initiatives that require coordination across multiple teams.
• Ability to collaborate effectively in mixed technical environments and contribute to improving the overall security maturity of supported programs. 

Salary Range Estimate: 

Min $109,344 – Max $175,732. The estimate displayed represents the typical salary range for this position and is just one component of Pueo’s total compensation package for employees. Other rewards may include annual bonuses, short- and long-term incentives, and program-specific awards. In addition, Pueo provides a variety of benefits to employees.

Pueo Overview: 

Pueo is a National Security cyber company built to inspect, defend, harden, and continuously authorize the networks our customers depend on. We deliver mission-grade cybersecurity across defense, intelligence, homeland security, federal enterprise, and critical infrastructure. Our work connects mission-risk inspection, defensive cyber operations, continuous authorization, security engineering, and mission delivery through one accountable team.

Pueo EEO Statement: 

Pueo is an equal employment opportunity employer and affirmative action employer. All interested individuals will receive consideration and will not be discriminated against on the basis of race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity, genetic information, or protected veteran status. Pueo takes affirmative action in support of its policy to advance diversity and inclusion of individuals who are minorities, women, protected veterans, and individuals with disabilities.