> Markdown version of [/jobs/ext/3438357-cybersecurity-consultant](https://www.wearedevelopers.com/jobs/ext/3438357-cybersecurity-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Consultant

- **Company:** Guidehouse Inc.
- **Location:** McLean, VA, United States
- **Experience:** Experienced
- **Salary:** $85,000.0 - $141,000.0
- **Contract:** Permanent contract
- **Skills:** Application Integration Architecture, CompTIA Security+, Cyber Security, Power BI, Systems Architecture, Mitre Att&ck, RSA Archer Platform, Data Pipelines, Plan of Action and Milestones
- **Published:** September 3, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9145452/cybersecurity-consultant

## About the Role

* Must be able to OBTAIN and MAINTAIN a Federal or DoD "PUBLIC TRUST"; candidates must obtain approved adjudication of their PUBLIC TRUST prior to onboarding with Guidehouse. Candidates with an ACTIVE PUBLIC TRUST or SUITABILITY and maintain an active HHS/NIH clearance are preferred.
 * Minimum of THREE (3) years of cybersecurity or IT risk management experience, candidates with experience focused on cybersecurity risk management are preferred.
 * Minimum of a Bachelors Degree is required.
 * Tools: Hands-on experience with GRC platforms.
 * Knowledge: Deep understanding of NIST SP 800-53, FISMA requirements, and 800-37.
 * Soft Skills: Strong communication and analytical thinking; ability to manage multiple concurrent priorities and deadlines.

What Would Be Nice To Have :

 * Experience developing automated data pipelines or integrating APIs into Power BI dashboards.
 * Knowledge of MITRE ATT&CK framework and vulnerability prioritization methodologies (e.g., EPSS, CVSS v3).
 * Prior experience supporting a federal agency or working in a Public Health environment.
 * Certifications: Active CompTIA Security+ CE preferred; CISSP, CEH, or cloud-related certifications are a plus.

## Description

* Lead cyber risk management efforts across a portfolio of client applications.
 * Manage end-to-end POA&M lifecycle, including creation, tracking, validation, and closure of identified security weaknesses
 * Prioritize remediation activities based on risk severity, compliance requirements, and operational impact
Conduct regular POA&M status reviews and coordinate with system owners and O&M teams to track milestone progress
Perform BIAs to identify critical systems, functions, dependencies, and recovery time/objectives
Collaborate with stakeholders to validate system criticality and align with continuity and contingency planning requirements

 * Build and maintain strong working relationships with business, engineering, and security teams to validate fixes, resolve blockers, and support timely remediation.
 * Prepare reports and briefings for leadership and federal oversight stakeholders.
 * Provide cyber subject matter expertise during information security audits and assessments.
 * Maintain and update BIA documentation in alignment with evolving system architecture and mission priorities