Cybersecurity Analyst

Clearance: Ability to obtain and maintain a Public Trust Salary Range: 80K-90K

LTS is seeking an experienced Cybersecurity Analyst to support cybersecurity, risk management, and security authorization activities across multiple projects within the U.S. Department of Veterans Affairs (VA) Health portfolio.

The analyst will provide hands-on support for the Risk Management Framework (RMF), Authority to Operate (ATO) processes, security control assessments, vulnerability remediation, continuous monitoring, and security and privacy documentation. This role requires independent execution of assigned deliverables and close coordination with Information System Security Officers (ISSOs), technical teams, project managers, and VA stakeholders.

The Health PMO support contract provides IT program management, project management, technical management, financial management, functional planning, and documentation analysis in support of the Enterprise Program Management Office (EPMO) Enterprise Program Management Division (EPMD) Health Portfolio

The VA Health Portfolio is focused on development and execution of quality IT projects that address the needs of Veterans and health care providers through management of healthcare information and sustainment of production software to keep the mission going.

What You’ll Do:

• Support development, maintenance, and updates of ATO packages, security authorization artifacts, and related documentation.

• Apply NIST RMF, NIST SP 800-53 Revision 5, VA Handbook 6500, and applicable federal and VA cybersecurity requirements to assigned systems and projects.

• Review and document security controls; support security control assessments, authorization activities, and continuous monitoring.

• Coordinate with ISSOs, system owners, engineers, and project stakeholders to identify security risks and address authorization requirements.

• Develop, evaluate, maintain, and track Plans of Action and Milestones (POA&Ms) from identification through documented closure.

• Review vulnerability scan results, analyze findings, coordinate corrective actions, and track remediation status.

• Support system scanning, audit readiness, High Value Asset (HVA) reviews, and other mandated security assessments.

• Prepare and maintain security and privacy artifacts, compliance reports, standard operating procedures, and supporting program documentation.

• Assist with contingency planning, incident response and disaster recovery documentation, and related exercises or testing.

• Support Privacy Impact Assessments (PIAs), Privacy Threshold Analyses (PTAs), and other applicable privacy documentation.

• Maintain accurate records and status updates in ServiceNow, governance, risk, and compliance (GRC) platforms, and other authorized tracking tools.

• Work with application development, operations, security architecture, and engineering teams to integrate security requirements throughout the system development lifecycle.

• Support security activities for IT modernization, application maintenance, cloud-related initiatives, and Agile delivery teams.

• Communicate security risks, remediation priorities, deliverable status, and process improvement recommendations to program and government stakeholders.

• Manage multiple assignments and deadlines independently while collaborating effectively in a remote team environment.

What We’re Looking For:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Information Technology, or a related field, plus at least five years of relevant professional experience; an additional five years of relevant experience may substitute for the degree.

• At least five years of relevant cybersecurity, information assurance, or federal security compliance experience.

• Hands-on experience supporting ATO processes for systems or applications at the VA or another federal agency.

• Practical experience applying NIST RMF, including security control documentation, assessment, authorization, and continuous monitoring.

• Strong working knowledge of FISMA, NIST SP 800-53, and applicable federal cybersecurity requirements; familiarity with HIPAA and HITECH requirements in healthcare environments.

• Experience developing and maintaining security authorization packages, assessment evidence, and compliance artifacts.

• Demonstrated experience creating, evaluating, tracking, and closing POA&Ms, including coordination of remediation actions.

• Experience analyzing vulnerability findings, coordinating mitigation, and tracking issues through resolution.

• Experience using enterprise GRC or security compliance tracking tools and a ticketing or workflow platform such as ServiceNow.

• Experience supporting security control assessments, cybersecurity audits, or compliance reviews.

• Strong analytical, technical writing, communication, and stakeholder coordination skills; ability to perform hands-on work independently in a collaborative remote environment.

• Current…