Cybersecurity Analyst

• Guide security packages through all six steps of the NIST Risk Management Framework from initial categorization and security control implementation through continuous monitoring.
• System Security Plans (SSPs), Risk Assessment Reports (RARs), Security Assessment Plans (SAPs), and Plan of Action and Milestones (POA&Ms).
• Perform routine vulnerability scans using tools like ACAS (Tenable) or HBSS/McAfee; track, triage, and remediate findings to reduce organizational risk.
• Audit, and validate DISA Security Technical Implementation Guides (STIGs) across servers, workstations, and network infrastructure.
• Maintain up-to-date compliance tracking, hardware/software baselines, and artifact uploads using the Enterprise Mission Assurance Support Service (eMASS).
• Utilize tools such as STIGMan, LanSweeper, SCAP, and SIEM platforms to support incident response, configuration management, and daily security posture assessments.

• Experience with the NIST Risk Management Framework (RMF). Employees should have practical experience with moving a system/RMF package through all steps from categorization to continuous monitoring.
• Experience creating/updating System Security Plans (SSP), Risk Assessment Reports (RAR), and Security Assessment Plans (SAP).
• Practical knowledge of implementing and auditing DISA Security Technical Implementation Guides (STIGs) on servers, workstations, and network devices.
• Hands-on experience with tools such as ACAS, eMASS, STIGMan, LanSweeper, SCAP, and SIEM platforms.
• Bachelor s degree in Cybersecurity, IT, Computer Science, or a related discipline; equivalent professional experience will also be considered.
• At least 3 years in relevant areas such as vulnerability management, RMF Implementation, software certification, SIEM, incident response, and configuration/change management.
• CompTIA Security+
• Active Top Secret clearance required.

We offer a competitive benefits package that includes the following: 401(k), health, dental, and vision insurance, life insurance, short-term and long-term disability insurance, paid time off, training, and professional development assistance.

Yakshna Solutions, Inc., (YSI) is a CMMI Level 3 assessed, ISO 9001, 20000:1, 27001 certified, woman-owned small business enterprises, headquartered in Herndon, VA, USA. YSI provides professional IT solutions and services to business corporations and government organizations. YSI is committed to serving business communities as a leading IT vendor providing innovative, quality, and cost-effective IT business solutions and services.