Cybersecurity Analyst

Are you ready to shape the future of healthcare? At Laerdal Labs D.C., we're on a mission to help save lives through innovative software solutions. Our SimCapture Cloud product is used by over 500 top hospitals, medical schools, and nursing programs in more than 35 countries. If you're passionate about making a real difference and thrive in a dynamic, collaborative environment, we want you on our team! Now, we're looking for a passionate and skilled FedRAMP Cybersecurity Analyst to join our dynamic team!

At a Glance:

As our FedRAMP Cybersecurity Analyst, you'll be the guardian of our SimCapture Gov Cloud, ensuring it meets federal regulations and follow the best cybersecurity practices. You'll dig into technical analyses, conduct risk assessments, and implement security enhancements-always staying one step ahead of potential threats. Along the way, you'll collaborate with cross-functional teams to maintain compliance with FedRAMP and other industry frameworks, driving ongoing authorization processes that keep our cloud solutions secure.

If you're ready for a role where your cybersecurity know-how can truly make a difference in healthcare education, Laerdal Labs D.C. is the place to be. Join us, and let's tackle the world's toughest security challenges together-while empowering healthcare professionals to save lives every day!

What You'll Do:

• Be the Hero: Start your day with a positive attitude, ready to address FedRAMP and NIST Security controls, vulnerability management, Continuous Monitoring (ConMon), and ensure POAM compliance for cloud IT systems.
• Expert Advisor: Serve as a subject matter expert (SME) FedRAMP and NIST Security controls, providing guidance to our cross-functional teams including product managers, engineers, CloudOps, and the Quality & Regulatory team.
• FedRAMP Fixer: Interpret the intent behind FedRAMP moderate and FISMA security controls, then translate that knowledge into actionable insights for the team.
• Authorization Ace: Play a key role in the FedRAMP or FISMA authorization process-conduct training, host mock interviews, refine security documentation, and roll out new processes as needed.
• 3PAO Ambassador: Forge strong alliances with Third Party Assessment Organizations (3PAO) while diving into collaborative PMO and agency efforts for a seamless security journey.
• ConMon Champion: Calmly tackle customer concerns about Continuous Monitoring activities, making sure our cloud environment stays secure, compliant, and ready for anything.
• Vulnerability Vigilante: Hunt down and analyze every vulnerability scan to ensure no security threat slips under the radar.
• Documentation Dynamo: Craft thorough, precise input for security documentation, ensuring technical control implementations are crystal clear and compliance-ready.
• Blueprint Bard: Capture every detail of our system's specs and security controls-mapping out logical and physical diagrams, connectivity paths, communication channels, and data flows, both inside and outside the system.
• Collaboration Conductor: Team up with security engineering, operations, and build crews to gather architecture diagrams, nail down technical details, and fine-tune security implementations.

What We're Looking For:

• Bachelor's degree in computer science, MIS, Information Technology, or equivalent experience in Information Security, Information Technology, or a related technical discipline.
• Minimum of 5 years of experience in Information Technology.
• Experience with Cloud technologies, particularly AWS and Azure.
• Experience with FedRAMP authorization and DOD cybersecurity standards including NIST 800-53 risk management framework.
• Proficiency in executing and analyzing vulnerability scans.
• Experience in developing, evaluating, and implementing information security architectures, technologies, standards, and practices to secure applications and IT systems is desirable.
• Flexible, self-motivated, and capable of working independently in a fast-paced environment.
• Excellent critical thinking and troubleshooting skills.
• Strong verbal, written, and interpersonal communication abilities.
• Exceptional time-management skills with the capacity to handle multiple tasks and priorities.
• A customer-first approach in all client and assessment communications.
• Demonstrated commitment to continual learning.
• U.S. Citizenship

Bonus Points For:

• Experience with healthcare simulation devices (e.g., manikins).
• Experience with healthcare learning management software.
• Experience working with (or for) a 3PAO, the PMO, and sponsor agency in an authorization process.
• Familiarity with logging and monitoring tools to execute queries, search/review data for impact.
• Achieved successful FedRAMP authorization for a SaaS solution.
• Knowledge of Federal/DoD IT and Cloud security policies and configuration tools.
• Advanced certifications like CompTIA Security+, Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Information Systems Auditor (CISA), CompTIA CySA+, GIAC Security Essentials (GSEC), and Systems Security Certified Practitioner (SSCP)

Ready to join a passionate and fun team dedicated to making a real impact? Apply now and be a part of our mission to help save lives!