> Markdown version of [/jobs/ext/3139665-cybersecurity-analyst](https://www.wearedevelopers.com/jobs/ext/3139665-cybersecurity-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Analyst

- **Company:** Yakshna Solutions, Inc.
- **Location:** Quantico, VA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Configuration Management, CompTIA Security+, Cyber Security, Networking Hardware, McAfee VirusScan, Network Architecture, SAP (Applications), Security Content Automation Protocol, Security Information and Event Management, Software Vulnerability Management, Information Technology, Network Server, Plan of Action and Milestones
- **Published:** September 29, 2026
- **Apply:** https://www.dice.com/job-detail/06663164-4349-45ce-81a7-b4cc5e71e3e0

## About the Role

* Experience with the NIST Risk Management Framework (RMF). Employees should have practical experience with moving a system/RMF package through all steps from categorization to continuous monitoring.
 * Experience creating/updating System Security Plans (SSP), Risk Assessment Reports (RAR), and Security Assessment Plans (SAP).
 * Practical knowledge of implementing and auditing DISA Security Technical Implementation Guides (STIGs) on servers, workstations, and network devices.
 * Hands-on experience with tools such as ACAS, eMASS, STIGMan, LanSweeper, SCAP, and SIEM platforms.
 * Bachelor s degree in Cybersecurity, IT, Computer Science, or a related discipline; equivalent professional experience will also be considered.
 * At least 3 years in relevant areas such as vulnerability management, RMF Implementation, software certification, SIEM, incident response, and configuration/change management.
 * CompTIA Security+
 * Active Top Secret clearance required.

## Description

* Guide security packages through all six steps of the NIST Risk Management Framework from initial categorization and security control implementation through continuous monitoring.
 * System Security Plans (SSPs), Risk Assessment Reports (RARs), Security Assessment Plans (SAPs), and Plan of Action and Milestones (POA&Ms).
 * Perform routine vulnerability scans using tools like ACAS (Tenable) or HBSS/McAfee; track, triage, and remediate findings to reduce organizational risk.
 * Audit, and validate DISA Security Technical Implementation Guides (STIGs) across servers, workstations, and network infrastructure.
 * Maintain up-to-date compliance tracking, hardware/software baselines, and artifact uploads using the Enterprise Mission Assurance Support Service (eMASS).
 * Utilize tools such as STIGMan, LanSweeper, SCAP, and SIEM platforms to support incident response, configuration management, and daily security posture assessments.