What are the responsibilities and job description for the Principal Cybersecurity Analyst (SME) position at ANSER?
Company Overview
ANSER enhances national and homeland security by strengthening public institutions. We provide thought leadership for complex issues through independent analysis, and we deliver practical, useful solutions. ANSER values collaboration, integrity, and initiative and we are client focused in all that we do. Because we were established for the purpose of public service and not for profit, we measure our success in the impact of our service.
Position Summary
ANSER is seeking a Principal Cybersecurity Analyst (Subject Matter Expert) to support the Department of Defense (DoD) in the design and implementation of information system security throughout the systems development lifecycle to ensure compliance with organizational and federal cybersecurity standards.
Day To Day Responsibilities
ANSER is proud to be an Equal Opportunity Employer. We seek individuals from a broad variety of backgrounds with varying levels of experience who have a desire to do meaningful work. We recruit, employ, train, compensate, and promote regardless of race, color, gender, religion, national origin, ancestry, disability, age, veteran status, sexual orientation, or any other characteristic protected by law.
ANSER enhances national and homeland security by strengthening public institutions. We provide thought leadership for complex issues through independent analysis, and we deliver practical, useful solutions. ANSER values collaboration, integrity, and initiative and we are client focused in all that we do. Because we were established for the purpose of public service and not for profit, we measure our success in the impact of our service.
Position Summary
ANSER is seeking a Principal Cybersecurity Analyst (Subject Matter Expert) to support the Department of Defense (DoD) in the design and implementation of information system security throughout the systems development lifecycle to ensure compliance with organizational and federal cybersecurity standards.
Day To Day Responsibilities
- Design, develop, and implement secure system and network architectures aligned with Risk Management Framework (RMF), the Federal Information System Controls Audit Manual (FISCAM), and Zero Trust Architecture principles, ensuring compliance across the system lifecycle
- Translate cybersecurity policies and controls (e.g., NIST SP 800-53) into automated, machine-readable Policy-as-Code and Compliance-as-Code solutions integrated into continuous integration/continuous delivery (CI/CD) pipelines and agile development sprints
- Build and maintain automated security frameworks, including Infrastructure-as-Code (IaC), configuration management, compliance validation, and orchestration layers to enable continuous monitoring and self-healing security operations
- Lead technical integration of AWS-native security services (e.g., AWS Security Hub, AWS Config, AWS CloudTrail) to support automated evidence collection, centralized logging, and real-time compliance validation
- Conduct solution analysis and architectural reviews to assess system designs, data flows, and integrations for cybersecurity risks, ensuring alignment with DoD policies and enterprise security requirements
- Active Secret security clearance
- Master’s degree in a relevant technical field such as computer science, software engineering, cybersecurity, or cloud computing
- One of the following certifications:
- AWS Certified DevOps Engineer – Professional or AWS Certified Solutions Architect – Professional
- AWS Certified Security – Specialty
- (ISC)² Certified Information Systems Security Professional (CISSP), preferably with an engineering or architecture concentration (ISSEP/ISSAP)
- 12 years of demonstrated experience in systems engineering and cybersecurity, with at least seven of those years focused on security automation, cloud engineering, and architecture
- Five years of demonstrated experience serving as a lead technical authority on enterprise-level projects, responsible for designing and implementing security solutions
- Five years of demonstrated experience translating complex regulatory requirements (RMF, NIST, DISA STIGs) and architectural diagrams into functional, automated, and operational code
ANSER is proud to be an Equal Opportunity Employer. We seek individuals from a broad variety of backgrounds with varying levels of experience who have a desire to do meaningful work. We recruit, employ, train, compensate, and promote regardless of race, color, gender, religion, national origin, ancestry, disability, age, veteran status, sexual orientation, or any other characteristic protected by law.