[Remote] Cybersecurity Analyst, IT Operations

Note: The job is a remote job and is open to candidates in USA. Fors Marsh is a team of researchers, strategists, and communicators dedicated to driving lasting change. They are seeking a detail-oriented Cybersecurity Analyst to support enterprise security operations and ensure compliance with federal frameworks. The role involves monitoring security events, managing vulnerabilities, and collaborating with IT and business teams to protect sensitive data.ResponsibilitiesSupport the implementation, monitoring, and enforcement of security controls aligned with NIST SP 800-171, NIST SP 800-53, and CMMC Level 2 requirementsMonitor security events and alerts across enterprise systems (e.g., SIEM, endpoint detection, network devices) and perform incident triage, investigation, and responseAssist in maintaining and securing Windows-based enterprise environments, including Active Directory, servers, and endpointsConduct vulnerability scanning and remediation tracking, including prioritization of findings based on risk and compliance impactSupport the protection, processing, and storage of Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) in accordance with company policy and contractual requirementsSupport and enforce organizational data classification policies, including identification, labeling, and handling of FCI, CUI, and other sensitive data typesEnsure appropriate access controls, data handling procedures, and system protections are applied based on data classification levelsCollaborate with IT and business teams to ensure systems and workflows properly segregate and protect sensitive data in secure environmentsAssist in monitoring and validating that CUI is restricted to authorized systems and not stored on end-user devices outside approved environmentsParticipate in internal and external security assessments (e.g., CMMC, IRS Pub 4812, RMF, and client audits) by gathering evidence and supporting control validationMaintain documentation for security controls, system configurations, and procedures to ensure audit readinessAssist in mapping technical controls and remediation efforts to applicable compliance frameworksWork closely with IT operations, system administrators, and leadership to address security risks and operational issuesCommunicate security risks and recommendations clearly to both technical and non-technical stakeholdersPromote user awareness of data handling expectations, including proper treatment of FCI and CUI in daily operationsSkillsBachelor's degree from an accredited college or university in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related fieldRelevant industry certifications such as Security+, CISSP, CISM, GSEC, CySA+, CEHMinimum of 7 years of progressively responsible experience in cybersecurity, information security, systems administration, network security, risk management, or a related IT discipline. Experience supporting security operations, incident response, vulnerability management, compliance, or security engineering in an enterprise environmentExperience implementing or supporting security requirements aligned with frameworks such as CMMC, NIST 800-53, NIST 800-171 and Cybersecurity Framework (CSF), ISO 27001, CIS Controls, or similar standardsExperience with security technologies such as SIEM platforms, endpoint detection and response (EDR), vulnerability scanning tools, identity and access management solutions, firewalls, and multifactor authentication technologies. Experience analyzing security logs, alerts, and incidents using tools with Nessus, Tenable or similar solutionsAbility to work on occasion in the Arlington, VA areaApplicants will be subject to a government security investigation and must meet eligibility criteria for access to sensitive informationMust be a U.S. Citizen and consent to a full background check due to our federal contract requirementsBenefitsTop-tier health, dental, vision, and long and short-term disability coverage.Our company culture, which values balance and allows each employee to take leave as they require it to balance the responsibilities of both their work and home lives without worrying about depleting their available leave hours.A floating holiday bank so you can celebrate the days you value.Generous matching retirement contributions and no vesting period starting the third month of employment.Dedicated training and development budgets to expand your expertise and grow your skillset.You can volunteer your way with paid time off.You can participate in Fors Marsh staff-led affinity groups.Our employees receive product and service discounts through the certified B Corp network.Company OverviewWe exist to drive lasting change. We view problems through a lens of humanity, evidence, and possibility. It was founded in 2002, and is headquartered in Arlington, Virginia, USA, with a workforce of 201-500 employees. Its website is https://www.forsmarsh.com/.