Cybersecurity Analyst

Description: Job Title: Cybersecurity Analyst Location: Oakton, VA Department: Cyber Security Services Reports To: Management FLSA Status: Full Time/Non-exempt Description: Apavo is at the forefront of cybersecurity, providing services to military, defense, and critical infrastructure industries. Joining the Apavo team means becoming part of a company rooted in the principles of quality, and communication. We value positive, candid interactions and the belief that everyone has valuable contributions to make. Apavo stands out for its commitment to a work-life balance and fostering a growth mindset among all team members. If you are looking to make a meaningful impact in the cybersecurity world while growing professionally in a supportive environment, Apavo is the place for you. Job Purpose: The Cybersecurity Analyst supports Department of Defense (DoD) cybersecurity operations by executing vulnerability management, compliance, and Continuous Monitoring (ConMon) activities within a Risk Management Framework (RMF) environment. This role ensures systems remain secure, compliant, and audit-ready by identifying and mitigating vulnerabilities, maintaining authorization posture, and supporting ongoing authorization efforts. Duties & Responsibilities: Cybersecurity Analyst responsibilities include, but are not limited to: Perform vulnerability scanning and analysis using ACAS tools (e.g., Nessus, Tenable.sc) Identify, assess, and track vulnerabilities, misconfigurations, and compliance gaps Validate findings against DISA STIGs and applicable security baselines Develop and maintain POA&M documentation and risk tracking within system of record Apply and validate STIGs across systems, applications, and network devices Conduct compliance checks using tools such as SCC, STIG Viewer, and Evaluate-STIG Monitor and manage IAVA/IAVM notices, ensuring timely remediation and reporting Execute Continuous Monitoring (ConMon) activities to maintain ongoing compliance Support RMF lifecycle activities, including control validation and ATO sustainment Maintain RMF artifacts (SSP, SAR, SAP, POA&M) and map findings to NIST SP 800-53 controls Generate reports and provide risk-based recommendations to leadership and stakeholders The Cybersecurity Analyst is expected to have additional duties as assigned in support of corporate cyber security services. Additional details are reviewed in accordance with company policies. Other: This is typical office or administrative work, and there is no exposure to adverse environmental conditions. This position requires sedentary work. Sedentary work is defined as: Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.

• Apavo Corporation provides equal employment opportunities to all applicants and employees and strictly prohibits any type of harassment or discrimination in regards to race, religion, age, color, sex, disability status, national origin, genetics, sexual orientation, protected veteran status, gender expression, gender identity, or any other characteristic protected under federal, state, and/or local laws.*
• Consistent with the Americans with Disabilities Act (ADA), it is the policy of Apavo Corporation to provide reasonable accommodation when requested by a qualified applicant or employee with a disability, unless such accommodation would cause an undue hardship. The policy regarding requests for reasonable accommodation applies to all aspects of employment, including the application process. If reasonable accommodation is needed, please contact Apavo Human Resources at View email address on click.appcast.io or View phone number on click.appcast.io*
• Employment with Apavo Corporation is on an at-will basis, meaning either you or the Company can terminate the employment relationship, at any time, for any reason, and with or without cause or notice. As an at-will employee, your employment with Apavo Corporation is not guaranteed for any length of time.*

Requirements: Qualifications Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience) 5-7+ years of experience in DoD cybersecurity or RMF-based environments Active Top Secret clearance with SCI eligibility DoD 8570/8140 compliant (IAT Level II - e.g., Security+) Hands-on experience with ACAS (Nessus / Tenable.sc) Experience with STIG implementation and validation Knowledge of IAVA/IAVM processes and vulnerability remediation tracking Strong understanding of DoD RMF (DoDI 8510.01) and NIST SP 800-53 controls Experience with tools such as SCC, STIG Viewer, eMASS/Xacta, Splunk, or Elastic Strong analytical, problem-solving, and communication skills #J-18808-Ljbffr Socket.dev