Cyber Security Consultant

Cybersecurity Consultant Apply: US - VA, McLean: US - MD, Bethesda: Full time: Posted Today: 44627Job Family:Cyber ConsultingTravel Required:Up to 25%Clearance Required:Ability to Obtain Public TrustWhat You Will Do:* Lead cyber risk management efforts across a portfolio of client applications.* Manage end-to-end POA&M lifecycle, including creation, tracking, validation, and closure of identified security weaknesses* Prioritize remediation activities based on risk severity, compliance requirements, and operational impact Conduct regular POA&M status reviews and coordinate with system owners and O&M teams to track milestone progress Perform BIAs to identify critical systems, functions, dependencies, and recovery time/objectives Collaborate with stakeholders to validate system criticality and align with continuity and contingency planning requirements* Build and maintain strong working relationships with business, engineering, and security teams to validate fixes, resolve blockers, and support timely remediation.* Prepare reports and briefings for leadership and federal oversight stakeholders.* Provide cyber subject matter expertise during information security audits and assessments.* Maintain and update BIA documentation in alignment with evolving system architecture and mission prioritiesWhat You Will Need:* Minimum of Two (2) years of overall work experience.* Experience in cybersecurity or IT risk management experience, candidates with experience focused on cybersecurity risk management are preferred.* Tools: Hands-on experience with GRC platforms.* Knowledge: Deep understanding of NIST SP 800-53, FISMA requirements, and 800-37.* Soft Skills: Strong communication and analytical thinking; ability to manage multiple concurrent priorities and deadlines.* Must be able to OBTAIN and MAINTAIN a Federal or DoD "PUBLIC TRUST"; candidates must obtain approved adjudication of their PUBLIC TRUST prior to onboarding with Guidehouse. Candidates with an ACTIVE PUBLIC TRUST or SUITABILITY and maintain an active HHS/NIH clearance are preferred.What Would Be Nice To Have:* Experience developing automated data pipelines or integrating APIs into Power BI dashboards.* Knowledge of MITRE ATT&CK framework and vulnerability prioritization methodologies (e.g., EPSS, CVSS v3).* Prior experience supporting a federal agency or working in a Public Health environment.* Certifications: Active CompTIA Security+ CE preferred; CISSP, CEH, or cloud-related certifications are a plus. The annual salary range for this position is $85,000.00-$141,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.What We Offer:Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.