Cybersecurity Analyst

Job Description

Job Description

Anticipated Opportunity – Federal Government Program

Important Hiring Notice: This position is being posted in anticipation of a potential upcoming contract award. The position is not immediately available. Osi Vision anticipates that hiring for this role may begin approximately 30–90 days from the date of posting, subject to contract award, Government direction, funding, and program start requirements. Candidates who apply may be contacted in advance to discuss qualifications, availability, clearance status, and interest.

Job Summary

The Cybersecurity Analyst will serve as a technical subject matter expert supporting the cybersecurity evaluation of products, systems, and emerging technologies for a Federal Government defense program. The position will review cybersecurity assessment reports and supporting technical evidence, evaluate potential vulnerabilities and risks, and provide technical recommendations regarding security requirements, risk mitigation, and technical acceptance.

The Cybersecurity Analyst will assess cybersecurity considerations involving embedded systems, software, firmware, wireless communications, networking, encryption, authentication, supply chain security, and related technologies. This role requires strong technical judgment and the ability to interpret complex cybersecurity assessment data and communicate findings effectively to Government personnel and other program stakeholders.

Essential Duties and Responsibilities

• Serve as a technical subject matter expert supporting cybersecurity evaluations of products, systems, components, and candidate technologies.
• Provide technical expertise and advisory support regarding cybersecurity requirements, technical standards, risk management, and assessment methodologies.
• Evaluate cybersecurity considerations involving embedded systems, software, firmware, wireless communications, networking, encryption, authentication, supply chain security, and related technologies.
• Interpret penetration testing results, vulnerability assessments, software assurance evaluations, firmware analyses, security test results, and other technical assessment data.
• Review cybersecurity assessment reports, technical documentation, test evidence, and supporting materials for completeness, technical sufficiency, and adequacy.
• Identify vulnerabilities, threats, attack vectors, weaknesses, and residual risks that could affect mission operations, system availability, information security, operational resilience, or national security objectives.
• Develop technical recommendations addressing cybersecurity findings, risk mitigation strategies, assessment requirements, security controls, and technical acceptance considerations.
• Evaluate remediation plans and supporting evidence to determine whether identified cybersecurity vulnerabilities and risks have been sufficiently mitigated.
• Apply applicable Federal cybersecurity statutes, policies, directives, frameworks, and technical standards to cybersecurity assessments and recommendations.
• Provide technical consultation to Government personnel, program leadership, technical teams, and other stakeholders on cybersecurity issues and risk considerations.
• Support cybersecurity risk assessments involving hardware, software, firmware, communications systems, and technology supply chains.
• Monitor emerging cybersecurity threats, vulnerabilities, attack techniques, technologies, and policy developments relevant to defense systems and emerging technologies.
• Recommend improvements to cybersecurity assessment processes, technical evaluation methodologies, risk mitigation practices, and program procedures.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, Information Technology, Information Systems, or a related technical discipline.
• Active Secret security clearance.
• Demonstrated knowledge of cybersecurity principles applicable to embedded systems, software, firmware, wireless communications, networking, encryption, authentication, supply chain security, and related technologies.
• Experience interpreting cybersecurity assessment methodologies, penetration testing results, vulnerability assessments, software assurance evaluations, firmware analyses, and other technical assessment data.
• Demonstrated experience applying Federal cybersecurity standards and security controls, including National Institute of Standards and Technology (NIST) Special Publication 800-53.
• Knowledge of cybersecurity supply chain risk management principles, including NIST SP 800-161 or comparable Federal guidance.
• Experience supporting or applying the Department of Defense Risk Management Framework (RMF), including activities associated with system authorization and Authority to Operate processes.
• Ability to evaluate complex technical evidence, identify cybersecurity vulnerabilities and risks, assess mitigation strategies, and develop technically sound recommendations.
• Strong analytical, technical writing, documentation, and communication skills.
• Ability to effectively communicate complex cybersecurity issues to technical and non-technical Government stakeholders.

Preferred Qualifications

• Five or more years of practical cybersecurity experience.
• Previous cybersecurity experience supporting Department of Defense or other Federal Government programs.
• Experience evaluating cybersecurity risks associated with embedded technologies, connected devices, communications systems, or other mission-critical systems.
• Experience with vulnerability assessment, penetration testing, software assurance, firmware analysis, or cybersecurity testing methodologies.
• Familiarity with Federal supply chain risk management, system security engineering, or technology assessment programs.
• Relevant cybersecurity certifications such as CISSP, Security+, CySA+, CASP+/SecurityX, CEH, or comparable industry certifications.

Employment Contingency

This is an anticipated position contingent upon contract award, Government approval, funding, security requirements, and final program requirements. Submission of an application does not constitute an offer of employment.

Osi Vision is proactively identifying qualified candidates for this potential requirement. Applicants may be contacted during the pre-award or transition period to discuss qualifications, active security clearance status, availability, compensation expectations, and potential start dates.

The anticipated hiring timeframe is approximately 30–90 days, but the actual start date may change based on Government and contract requirements.