Job Description:Dynamo Technologies, LLC is seeking a Cybersecurity Policy Analyst to support the Defense Logistics Agency (DLA) Technology Foundation Services (TFS) Vulnerability Management Program. The selected candidate will review, consolidate, and develop cybersecurity policies in accordance with government requirements and provide technical support to programs by assessing IT policies, standards, guidelines, and procedures. This position will support the implementation of DoD cybersecurity policies, procedures, and processes while ensuring a balance between security requirements and operational objectives. The Cybersecurity Policy Analyst will brief senior management on cybersecurity policy changes, updates, and program progress.
Duties/ Responsibilities - Review, consolidate, and develop cybersecurity policies in accordance with government requirements.
- Provide technical support and assistance to programs regarding cybersecurity policies, standards, guidelines, and procedures.
- Assess existing IT policies and procedures to ensure alignment with operational and security requirements.
- Support implementation of DoD cybersecurity policies, procedures, and processes.
- Develop cybersecurity artifacts supporting STIGs, TCG configuration guides, IAVMs, and Task Orders.
- Develop, maintain, and validate RMF artifacts and cybersecurity documentation.
- Update and track POA&M entries by documenting findings, remediation actions, and milestone status.
- Generate cybersecurity reports including vulnerability summaries, compliance status updates, and risk findings.
- Produce analytics and trend reports using data from vulnerability scanners, configuration tools, and security platforms.
- Support cybersecurity compliance and inspection readiness activities.
- Conduct cybersecurity research and analysis to support policy development and implementation.
- Brief senior management on cybersecurity policy changes, updates, and progress.
Required Skills/Abilities- Experience supporting the implementation of DoD cybersecurity policies, procedures, and processes.
- Ability to develop cybersecurity artifacts for STIGs, TCG configuration guides, IAVMs, and Task Orders.
- Ability to develop, maintain, and validate RMF artifacts and cybersecurity documentation.
- Experience updating and tracking POA&M entries and remediation activities.
- Proven ability to work independently and collaboratively with minimal oversight.
- Strong research and analytical skills.
- Proficiency with Microsoft Excel, Microsoft Access, Power BI, and Microsoft Power Platform tools.
- Ability to generate clear, accurate, and audit-ready cybersecurity reports.
- Experience producing detailed analytics and trend reports using vulnerability management and security platform data.
- Excellent written and verbal communication skills, including briefing senior leadership.
Nice to Have Skills- Experience supporting RMF activities and cybersecurity compliance initiatives.
- Experience supporting vulnerability management programs.
- Familiarity with NIST-based cybersecurity frameworks and assessment processes.
- Experience supporting cybersecurity inspections, audits, and assessments.
- Knowledge of enterprise IT environments and cybersecurity governance.
- Experience supporting DoD cybersecurity programs.
Education and Experience:- Seven (7) years of relevant cybersecurity policy experience.
- Required Certifications:
- ACAS and Tanium.
- DLA Approved Computing Environment (D Account Access).
- DoD 8570 - IAT Level II.
Travel Requirement:
- Travel may be required in support of audits, inspections, assessments, and stakeholder coordination activities.
Clearance Requirement:- Must possess a DoD Secret Clearance and be eligible for an IT-II Non-Critical Sensitive security clearance or Tier 3 (T3) upon assignment.