Responsibilities:

• Support cybersecurity assessments, including control gap analysis, evidence gathering, and remediation tracking.
• Assist in designing security operations processes, including incident response playbooks and escalation procedures.
• Assess Zero Trust and IAM readiness and support development of implementation roadmaps aligned with compliance timelines.
• Analyze dependencies between security remediation and broader technology or cloud migration initiatives.
• Support ICAM modernization, including onboarding backlog analysis and process streamlining.
• Support readouts of in-flight cyber and identity programs, capturing leadership, resources, financials, schedules, and obstacles.
• Build and support continuous control-monitoring programs, including control testing cadence, automated evidence collection, and compliance dashboards and KPIs tracking control effectiveness and audit readiness over time.
• Support authorization maintenance, including POA&M lifecycle management, significant-change reviews, reauthorization triggers, and ongoing third-party assurance.
• Contribute findings and analysis into A&M's broader engagement scope and deliverables.
• Support practice development through internal knowledge sharing and content creation.

Qualifications:

• 4+ years of professional experience in cybersecurity for complex, large enterprises, with consulting or advisory delivery experience a plus.
• Demonstrated experience supporting security assessments, incident response engagements, or compliance remediation efforts.
• Government or defense experience strongly preferred. Regulated industry experience in financial services or healthcare can substitute, and deep experience in other complex environments may also substitute.
• Bachelor's degree required; Security+ (meets the DoD 8140 baseline), CySA+, GSEC, or equivalent certifications strongly preferred; CISSP, CISM, CAP, CISA, or CCSP is a plus.
• Comfortable with travel up to 60%.
• Active Secret Clearance required; TS/SCI eligibility strongly preferred.
• U.S. Citizenship and Residency required.

What Distinguishes a Great Candidate:

Has hands-on experience analyzing and remediating security issues at scale — not just monitoring existing tooling. Understands the dependency between security readiness and broader technology transformation success. Can work across security, infrastructure, and compliance teams. Brings AI-assisted security analysis into the delivery toolkit as standard practice. Builds compliance that is sustained over time — continuous monitoring and automated evidence rather than point-in-time audits.