{"id":2939385,"url":"https://alion.io/job/andrew-morgan-cyber-security-analyst","title":"Cyber Security Analyst","company":{"id":325637,"name":"Andrew Morgan","domain":"andrew-morgan.com","url":"https://alion.io/company/andrewmorgan","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":4,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":106,"computed_at":"2026-10-22T06:10:10Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":140000,"max":155000,"currency":"USD","period":"year","gross":null,"usd_annual":155000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"FedRAMP","optional":false},{"name":"IAM","optional":false},{"name":"Oracle ERP","optional":true}],"status":"live","first_seen_at":"2026-10-20T15:29:13Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-23T00:55:59Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Andrew Morgan LLC (AM) is a fast-growing Service-Disabled Veteran-Owned Small Business (SDVOSB). We are currently seeking a qualified Cyber Security Analyst (Federal OneStream Support) to join our team supporting our DoD Federal Client. The analyst will own the security compliance lifecycle for the platform, from authoring policies and procedures through achieving and sustaining the Authority to Operate (ATO).\nWorking alongside functional, technical, and program teams, the analyst will translate federal security requirements into practical controls for a cloud-based enterprise performance management (EPM) solution. This role suits a hands-on practitioner who is equally comfortable writing a System Security Plan, briefing an Authorizing Official, and reviewing OneStream security roles with administrators.\nRESPONSIBILITIES:\nLead the full RMF lifecycle (NIST SP 800-37) for OneStream systems: categorization, control selection, implementation, assessment, authorization, and continuous monitoring.\nDevelop and maintain the ATO package, including the System Security Plan (SSP), Security Assessment Report inputs, Plan of Action and Milestones (POA&M), contingency plan, incident response plan, and configuration management plan.\nMap and document NIST SP 800-53 controls, including inherited controls from FedRAMP-authorized cloud service providers and customer-responsibility controls.\nCoordinate with Security Control Assessors (SCAs), Information System Security Managers (ISSMs), and Authorizing Officials (AOs) to drive packages to authorization.\nManage artifacts and workflows the GRC tool.\nAuthor, review, and update system-specific security policies, standard operating procedures (SOPs), and rules of behavior.\nDocument access control, account management, audit logging, separation of duties, and data handling procedures tailored to OneStream.\nAlign documentation with applicable federal and agency guidance, including DoD Instruction 8510.01, DISA STIGs and SRGs, FISMA, and OMB Circulars A-130 and A-123.\nTrack and remediate vulnerabilities and POA&M items with technical teams, ensuring milestones are met and closure evidence is documented.\nConduct periodic access reviews, security role audits, and user recertifications within OneStream.\nAssess the security impact of system changes, upgrades, and new integrations before deployment.\nSupport annual assessments, ATO reauthorizations, and ongoing authorization activities.\nPartner with OneStream team to design and validate the security model, including security groups, roles, cube and workflow access, and data-level restrictions.\nReview integrations with source systems (e.g., Momentum and data warehouses) for secure data transfer and interface controls.\nConfirm audit logging and reporting capabilities meet federal record-keeping and accountability requirements.\nSupport financial statement audits and IT general controls (ITGC) reviews, including FISCAM-based testing, by preparing evidence and responding to auditor requests.\nBrief program leadership and government stakeholders on security posture, risks, and remediation status.\nContribute security content to proposals, project plans, and client deliverables as needed.\nREQUIREMENTS:\nU.S. citizenship.\nMinimum of five (5) years of relevant cybersecurity experience, including at least three (3) years supporting on-premise or SaaS federal information systems. \nDemonstrated experience preparing and sustaining ATO packages under the NIST Risk Management Framework.\nWorking knowledge of NIST SP 800-53, SP 800-37, SP 800-171, and FISMA requirements.\nProven ability to write clear, audit-ready security policies, procedures, and system documentation.\nExperience managing POA&Ms and coordinating vulnerability remediation with technical teams.\nActive DoD 8140/8570 IAM Level I or IAT Level II baseline certification (e.g., Security+, CASP+, CISSP, or CISM), or the ability to obtain one within 90 days of hire.\nBachelor's degree in cybersecurity, information systems, or a related field; additional years of relevant experience may substitute for a degree.\nStrong written and verbal communication skills, including briefing senior government stakeholders.\nPREFERRED QUALIFICATIONS:\nActive Secret clearance, or the ability to obtain and maintain one; Public Trust eligibility at minimum.\nExperience working with OneStream or other EPM and financial systems (e.g., Oracle Hyperion, SAP BPC, or Anaplan).\nBackground supporting federal financial management programs.\nExperience with cloud services, single sign-on and 3rd party integrations\nFamiliarity with FedRAMP, DoD Cloud Computing SRG impact levels, and shared-responsibility models for SaaS and cloud-hosted applications.\nHands-on experience with GRC tools.\nExperience supporting financial statement audits, FISCAM, or OMB A-123 internal control reviews.\nAdvanced certifications such as CISSP, CISM, CAP/CGRC, or CCSP.\nSALARY:\nBase Salary: $140,000-$155,000\nSalary is commensurate with both location and experience.\nTHE AM EMPLOYEE WILL DISPLAY…\nAttention to Detail: Produce high-quality deliverables and outputs that align with contract outcomes.\nSelf-Sufficiency: Execute tasks independently, seeking client assistance only after internal resources are exhausted, ensuring requests align with contract goals.\nTeamwork: Collaborate effectively with team members, including AMC resources, subcontractors, and government stakeholders.\nCommunication/Engagement: Maintain professional conduct in meetings and written communication, participating actively with cameras on.\nResponsiveness: Stay engaged, communicate promptly, and ensure deadlines are consistently met.\nABOUT ANDREW MORGAN…\nAndrew Morgan LLC, founded in 2017 and headquartered in Alexandria, VA, is a Service-Disabled Veteran Owned Small Business (SDVOSB). We specialize in delivering high-quality consulting services to both federal and commercial clients, offering expertise in Strategy and Management Consulting, Technology & Architecture Services, and Industry & Mission Analytics Solutions. Our distinguished clientele includes the Department of Veterans Affairs (VA), National Aeronautics and Space Administration (NASA), the Department of Defense (DoD), and the United Stated Army Corps of Engineers (USACE). We are committed to providing innovative solutions and exceptional service to support our clients' missions and objectives.\nBENEFITS:\n15 days of Paid Time Off + 11 Paid Federal Holidays\n401K Program (up to 4% employer matching)\nThree Gold Healthcare Options (with 75%-90% employer-paid premiums)\nFlexible Spending Account / Dependent Care Assistance Program\nEmployer-Paid Short Term Disability Insurance\nEmployer-Paid Long Term Disability Insurance\nEmployer-Paid Life Insurance\nProfessional Training and Development\nCorporate Team Building Events\nAnd MORE!\nEQUAL OPPORTUNITY EMPLOYER:\nAndrew Morgan does not discriminate in employment opportunities, terms and conditions of employment, or practices. All qualified applicants will receive consideration for employment without regard to race, age, gender, religious or political beliefs, national origin or heritage, disability, sexual orientation, protected veteran status, or any characteristic protected by law.","description_format":"text","description_chars":7223,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["401k plan","Life insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Audit & Assurance Firms","Security Compliance","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-20T16:57:26Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":106,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":155000,"is_top_pay":false},"html_url":"https://alion.io/job/andrew-morgan-cyber-security-analyst","json_url":"https://alion.io/job/andrew-morgan-cyber-security-analyst.json","meta":{"generated_at":"2026-10-23T01:14:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2067,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":325637},"rest":"https://alion.io/mcp/rest/get_company?id=325637"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fandrew-morgan-cyber-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fandrew-morgan-cyber-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fandrew-morgan-cyber-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/andrew-morgan-cyber-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fandrew-morgan-cyber-security-analyst"}]}