> Markdown version of [/jobs/ext/4547000-cyber-security-analyst](https://www.wearedevelopers.com/jobs/ext/4547000-cyber-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Analyst

- **Company:** Pueo Business Solutions
- **Location:** McLean, VA, United States
- **Salary:** $109,344.0 - $175,732.0
- **Contract:** Permanent contract
- **Skills:** Xacta, Cyber Security, Information Systems, Federal Information Processing Standards (FIPS), Software Vulnerability Management, Cyber Threat Analysis, Information Technology, Patch Management, Splunk, Plan of Action and Milestones
- **Published:** November 3, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9281407/cyber-security-analyst

## About the Role

* Top Secret Security Clearance with SCI eligibility. Ability to Pass CI Poly.
 * Bachelor's degree in cybersecurity, computer science, information technology, or a related field with 8 years of experience, or 12 years of relevant experience in lieu of a completed degree.
 * Obtain and maintain an IAT level II Certification in compliance with DoD 8570.01-M and DoD Directive 8140 Cyberspace Workforce Management. (ex: CySA+, Security+, GICSP, GSEC, CND, CCNA Security, SSCP).
 * Strong interpersonal and communication skills to engage stakeholders and explain technical issues in a clear, mission focused way.
 * Hands on experience interpreting vulnerability and compliance reports from XACTA, STIGs, ACAS, Prisma, Splunk, Trellix (HBSS), or similar tools.
 * Solid analytical and problem-solving skills to identify root causes and recommend practical remediation steps.

Desired Qualifications:

 * An active Top Secret security clearance with SCI eligibility and current CI poly.
 * Sound knowledge of RMF, NIST 800 series, FIPS, SA&A processes, continuous monitoring, POA&M policies, and vulnerability/patch management.
 * Experience using Cyber Risk Management Platforms (e.g., XACTA) for workflow automation, compliance tracking, and RMF execution.
 * Some experience leading or contributing to security initiatives that require coordination across multiple teams.
 * Ability to collaborate effectively in mixed technical environments and contribute to improving the overall security maturity of supported programs.

## Description

Pueo is seeking a Cyber Security Analyst to join our unique team of multidisciplined experts onsite in McLean, VA. This position focuses on driving meaningful security outcomes through vulnerability management, continuous monitoring, compliance support, and risk-informed decision-making.

The Cyber Security Analyst will be responsible for the following, but not limited to:

 * Responsible for supporting the security and maintenance of information systems throughout the RMF lifecycle; from preparation through decommission in alignment with ICD, DIA, and DoD/DoW cybersecurity policies.
 * Focuses on executing RMF tasks while actively engaging with DIA ISSMs/SCAs, and client PMs/ISSOs teams to ensure security activities lead to meaningful outcomes.
 * Ensuring ISSOs remain focused on risk-reduction priorities, not just administrative tasks.
 * Helping stakeholders understand why certain vulnerabilities matter and how remediation improves the system's overall security posture.
 * Providing technical input and continuous monitoring support that contributes to measurable improvements in compliance and audit readiness.
 * Evaluate cybersecurity impacts of system changes, supports control implementation, and helps maintain accurate, actionable security documentation.
 * Document vulnerabilities, misconfigurations, and issues clearly and thoroughly to support remediation planning and stakeholder understanding.
 * Use XACTA to manage risk assessments, security control evidence, POA&M tracking, and compliance status.
 * Monitor and track POA&M items, ensuring vulnerabilities identified in scans or audits are documented, mitigated, and closed appropriately with a focus on reducing repeat findings.
 * Collaborate with ISSMs, ISSOs, SCAs, PMs, and other partners by providing guidance, clarifications, and context that help them make informed decisions.
 * Represent cybersecurity standards and expectations in all engagements, reinforcing mission alignment and transparency.?