Senior Cybersecurity Operations Analyst

Salary: $145,000 - 155,000 per year Requirements:

• We need a bachelors degree in Cybersecurity or a related technical discipline.
• We need 6+ years of experience in security operations, vulnerability management, or offensive security, including senior or lead-level responsibility.
• We need the ability to communicate technical cybersecurity findings and recommendations to system owners, business sponsors, developers, infrastructure teams, and IT operations staff.
• We need strong communication skills for both technical and nontechnical audiences.
• We need excellent technical writing, research, analytical, organizational, and communication capabilities.
• We need expert knowledge of federal cybersecurity and privacy laws, regulations, policies, procedures, and implementation standards.
• We need expert experience supporting compliance with NIST SP 800-18, 800-30, 800-34, 800-37, 800-53 Rev. 4, 800-53A Rev. 4, 800-60, 800-66 Rev. 1, 800-137, FIPS 199, and FIPS 200.
• We need knowledge of incident response, vulnerability identification, vulnerability management, and remediation.
• We need familiarity with FISMA assessment and authorization, GSA FedRAMP processes, and current cloud-service technologies.
• We need experience applying Federal Information Security Continuous Monitoring and Continuous Diagnostics and Mitigation technologies.
• We need understanding of static-code vulnerability scanning and vulnerability-management tools.
• We need experience or knowledge of security audit-log monitoring.
• We need experience supporting DevSecOps implementation, including architecture diagrams, process documentation, standard operating procedures, and static-code scanner integration and management.
• We need expert experience with enterprise security architecture methods, concepts, procedures, principles, and tools.
• We need knowledge of secure configuration and baseline validation practices.
• We need knowledge of secure application-development concepts, dynamic and static application-security testing tools, scan results, and remediation practices.
• We need experience performing vulnerability, application-security, database-security, and network-security assessments and interpreting results.
• We need understanding of Identity, Credential, and Access Management implementation.
• We need knowledge of domain structures, network protocols, user authentication, digital signatures, firewalls, data-loss-prevention technologies, intrusion-detection and intrusion-prevention systems, and security best practices.
• We need knowledge of Windows Server, Linux/Unix, Active Directory, and related operating-system services.
• We need knowledge of federal cybersecurity audits and evaluations, including FISMA, OIG, and GAO activities.
• We need the ability to plan, carry out, document, and report on internal and external application and network vulnerability analyses, with technical recommendations that improve mission functionality and security.
• We need at least three years of experience in contingency planning, backup and recovery best practices, and NIST contingency-planning guidance.
• We need experience with risk-management tools, including JCAM (formerly CSAM).
• We need proficiency with Microsoft Word, Excel, PowerPoint, Visio, Teams, Tableau, and SharePoint.
• We need the ability to manage multiple concurrent priorities, including creating documentation for new systems while supporting updates to systems in production.
• We need current, verifiable CISSP certification.
• We need current, verifiable Cloud Security Knowledge certification, Microsoft Azure certification, or another recognized cloud-security certification.
• We need to satisfy all applicable Cherokee Federal, government, and DOT personnel-security and background-screening requirements.
• We need to possess or be able to obtain a DOT Public Trust clearance.
• We prefer ITIL v3 or later and relevant certifications from ISC2, SANS, EC-Council, Microsoft, Cisco, or similar organizations.

• We provide cybersecurity and information assurance support for our agency security program.
• We support cybersecurity incident-handling activities.
• We assist with vulnerability detection and remediation strategy development.
• We provide expertise in secure application-development techniques.
• We support secure baseline validation, security audit-log monitoring, and static-code vulnerability scanner integration and management.
• We help implement the security portion of DevSecOps.
• We develop and maintain cybersecurity architecture diagrams.
• We create processes, procedures, and standard operating procedures for DevSecOps and cybersecurity operations.
• We maintain an up-to-date inventory of network ranges, assets, groups, and custom groups within the DOT CDM BigFix tool.
• We assist with remediation of cybersecurity issues identified in security reports.
• We provide subject-matter expertise in incident handling, vulnerability detection, remediation planning, secure application development, cloud environments, and cloud services.
• We maintain core system documentation using standardized templates, technical guides, baseline-management documentation, and supporting checklists.
• We update the organizations Cybersecurity Handbook, Secure Configuration Procedures, Incident Handling Procedures, Threat, Vulnerability, and Risk Monitoring SOPs, and Continuous Monitoring Risk Management Plan.
• We coordinate with functional teams to gather documentation and artifacts for audits and evaluations.
• We draft responses for FISMA, CFO, OIG, GAO, and other audits or evaluations, and we track and report findings and recommendations.
• We support government suspense dates tied to audits, evaluations, findings, and data calls.
• We respond to cybersecurity data calls and other government inquiries.
• We provide programmatic cybersecurity guidance to system owners as requested.
• We execute information-system contingency-plan testing in line with applicable NIST guidance.
• We deliver contingency training to personnel with recovery responsibilities and capture lessons learned and corrective actions from exercises.
• We update contingency plans based on testing outcomes.
• We review logs using suspicious-activity queries to identify, investigate, and support response to cybersecurity incidents.
• We help personnel understand ISCP roles and the skills needed to carry out system-recovery responsibilities.
• We support risk analysis and mitigation activities as directed and approved by authorized government officials.
• We recommend actions to address cybersecurity threats, vulnerabilities, and risks.
• We perform other job-related duties as assigned within the scope of the program.
• We help develop and deliver cybersecurity awareness communications and outreach efforts with internal stakeholders.

• Active Directory
• Azure
• Cloud
• Cisco
• DevSecOps
• Excel
• Support
• ITIL
• Linux
• Network
• Security
• SharePoint
• Tableau
• Unix
• Windows

More:

We support the Department of Transportation Federal Highway Administration Cyber Security Management Support program, providing program management and technical cybersecurity support under the oversight of the FHWA Information System Security Manager. In this role, we plan, implement, operate, monitor, and report on cybersecurity activities that strengthen the security posture of FHWA information systems. Compensation is commensurate with experience, with pay listed at $145,000 to $155,000. This position is associated with Cherokee Federal and includes a notice of equal employment opportunity. Similar titles include Senior Cybersecurity Analyst, Senior Information Security Analyst, Cybersecurity Operations Specialist, Information Assurance Analyst, and Senior Security Compliance Analyst.

last updated 40 week of 2026