Cybersecurity Analyst

The Team and the Role

INDUS is a 100% employee-owned, customer-focused government services provider with expertise in Engineering, Information Technology, Cybersecurity, Program/Financial Management, Logistics, and Data Analytics. At INDUS, we believe in the value of the INDUS team. Together we deliver exceptional customer service, foster a growth and support-centered work environment, and focus on how we can give back to the communities that we serve. Empowering our employees starts on day one and creates an environment full of innovation and promise.

By offering mentorship and robust Training and Development opportunities, INDUS continues its pursuit to be the Employer of Choice.

The Navy’s Security Control Assessor is responsible for independently evaluating, validating, and verifying the implementation and effectiveness of security controls in accordance with Department of Defense (DoD) Risk Management Framework (RMF) requirements. This effort focuses on identifying, analyzing, and documenting cybersecurity risks associated with C4I systems supporting security cooperation and operational mission requirements.

Reporting to the Program Manager, the Cybersecurity Analyst conducts cybersecurity risk assessments, validates security control implementation, and develops risk recommendations for C4I systems on the
Risk Management Framework support services contract
.

• Conduct independent RMF Step 4 security control assessments to evaluate the effectiveness of implemented controls and determine residual cybersecurity risk in support of Authorization to Operate (ATO) decisions.

• Perform comprehensive Accreditation & Authorization (A&A) activities, including detailed review, validation, and analysis of RMF packages and supporting artifacts such as System Security Plans (SSPs), network and architecture diagrams, authorization boundary documentation, security control implementation statements, Security Assessment Plans (SAPs), Security Assessment Reports (SARs), test plans, test procedures, test results, and Plans of Action and Milestones (POA&Ms).

• Review network topologies, data flow diagrams, interface documentation, and system architecture artifacts to validate security categorization, control allocation, boundary definition, control inheritance, and external service dependencies for accuracy and completeness within the authorization package.

• Identify, analyze, and document security control deficiencies, vulnerabilities, and gaps; assess likelihood and impact; determine residual risk; and develop risk mitigation and remediation recommendations for Authorizing Officials (AOs).

• Evaluate security test strategies and results to ensure assessment procedures adequately validate control effectiveness and meet DoD and Navy RMF requirements.

• Assess cybersecurity impacts of system changes, configuration updates, interface modifications, and inherited controls to support ongoing authorization, continuous monitoring, and reauthorization decisions.

• Develop formal risk assessment documentation and authorization decision support materials, providing clear, defensible risk determinations and recommendations aligned with DoD and Navy cybersecurity policy.

• Support continuous monitoring activities by reviewing updated SSPs, change requests, vulnerability scan results, POA&Ms, and periodic reassessment artifacts to ensure sustained risk visibility and compliance.

• Provide independent cybersecurity risk analysis during technical and program reviews to inform authorization decisions, audit readiness, and compliance inspections.

• Bid and proposal support if requested.

• Other duties as assigned.

Required Qualifications:

• An active secret clearance is required to be considered for this position.
• Bachelor's degree from an accredited university in Cybersecurity, Computer, Electrical, or Electronics Engineering, or Mathematics with a concentration in computer science or equivalent is required.
• At least one (1) year of experience providing information technology, networking, or cybersecurity support to a Navy program office.
• Certifications:
  • Must be IAT, IAM, or IASAE Level I qualified per the DoD 8570.1M (CompTIA…