Cybersecurity Analyst / Consultant

Gold Systems is seeking a Cybersecurity Analyst / Consultant (Mid-Level or Senior) to support cybersecurity compliance and risk management activities for federal information systems, including programs supporting the U.S. Environmental Protection Agency (EPA). This role focuses on FISMA compliance, NIST security controls, and Risk Management Framework (RMF) activities, including development of security documentation, participation in security assessments, and support for system authorization and continuous monitoring processes across moderate-impact federal systems.

What You’ll Do

• Develop and maintain security documentation including System Security Plans (SSP), Security Assessment Reports (SAR), Plans of Action and Milestones (POA&M;), contingency plans, and other documentation supporting ATO authorization packages.

• Support activities across the NIST Risk Management Framework (RMF) lifecycle including categorization, control implementation, security assessment, authorization, and continuous monitoring.

• Participate in security assessments and Authorization to Operate (ATO) processes, including preparation of authorization packages and coordination with security assessors.

• Support continuous monitoring activities including POA&M; management, remediation tracking, and security control updates.

• Review vulnerability scan results and assist with remediation coordination for identified findings.

• Collaborate with developers, infrastructure teams, and system owners to implement and document security controls.

• Assist with FISMA compliance reporting and federal cybersecurity audits or reviews. 

Must-Haves

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field.

• 3+ years of experience supporting cybersecurity compliance, RMF, or federal information system security.

• Knowledge of federal cybersecurity standards including FISMA, NIST SP 800-53, NIST Risk Management Framework (RMF), and OMB Circular A-130.

• Experience working with ATO authorization packages and security documentation.

• U.S. Citizenship required.

• Ability to obtain and maintain a federal Public Trust or background investigation.

Nice-to-Haves

• Cybersecurity certifications such as CISSP, CompTIA Security+, or similar.

• Experience supporting moderate or high-impact federal systems.

• Familiarity with cloud security in AWS environments.

• Experience with security and monitoring tools such as Splunk, Nessus, SmartCube, or similar platforms.

Travel

• Limited travel (approximately 2–3 trips per year) may be required for security assessments, federal program reviews, or collaboration with agency stakeholders.

Compensation

• This is a full time position. 

• Medical and dental benefits

• 401K

• Paid time off

• Technology budget

About Gold Systems

Gold Systems works on a variety of environmental and natural resource-focused projects for Federal, State, and Tribal Nation clients. Gold Systems provides a unique opportunity to work in a small environment with large technology and clients. Gold Systems offers all employees:

• A unique and positive working environment

• Competitive salary and benefits

• Open access to management

• Flexible schedules

• Career mentoring

We are not only dedicated to the success of our clients, but also to the success of our staff. Gold Systems is an Equal Opportunity Employer.