Note: The job is a remote job and is open to candidates in USA. Revolutional is seeking a Risk and Compliance Analyst to support cybersecurity activities across a large Department of Veterans Affairs enterprise environment. The role focuses on developing and assessing security configuration baselines, evaluating systems against federal standards, identifying security and compliance gaps, supporting remediation, and automating continuous compliance activities.
Responsibilities
- Develop, maintain, and assess enterprise security configuration baselines
- Evaluate operating systems, databases, cloud platforms, IoT/medical devices, and other technologies against approved security standards
- Perform security control, configuration, risk, and compliance assessments
- Identify configuration drift and develop actionable remediation recommendations
- Map technical requirements and configurations to NIST SP 800-53 and applicable federal/VA controls
- Support requirements traceability from cybersecurity controls through implementation and ATO
- Support FISMA and other audit/remediation activities
- Develop risk analyses, findings, remediation plans, and technical assessment reports
- Identify opportunities to automate configuration assessment and compliance validation
- Analyze security posture trends rather than relying solely on point-in-time assessments
Skills
- • 3+ years of experience in cybersecurity, security compliance, configuration management, vulnerability management, security engineering, or related work
- • Working knowledge of NIST cybersecurity controls, RMF, security baselines, vulnerability management, or configuration compliance
- • Experience assessing security controls, configurations, vulnerabilities, or compliance requirements and documenting findings and remediation recommendations
- • Ability to work with technical teams to understand and resolve security findings
- • Relevant cybersecurity, engineering, military, or federal experience may be considered in lieu of a degree
- Must be authorized to work in the United States and able to pass the background investigation to obtain a Federal Government Public Trust clearance
- • Bachelor's degree in Cybersecurity, Information Technology, Information Systems, Computer Science, or a related field preferred
- • Federal cybersecurity experience involving NIST SP 800-53, FISMA, RMF, ATO, or continuous monitoring
- • Experience with STIGs, CIS Benchmarks, SCAP, vulnerability scanners, or configuration-assessment technologies
- • Experience developing or maintaining secure configuration baselines
- • Experience automating compliance or configuration assessments
- • Experience with POA&M remediation and security-control traceability
- • Security+, CySA+, CAP/CGRC, CISSP, CISA, CASP+/SecurityX, or similar
- • Vendor or platform certifications relevant to security configuration or vulnerability management
Benefits
- Remote work arrangement (preference to local Washington, DC area)
Company Overview