Principle Cybersecurity Analyst IV

Tharros is seeking a Senior Cybersecurity SME to serve as a strategic advisor and technical authority supporting a Department of Defense customer. This role will provide senior-level oversight of cybersecurity strategy, policy, architecture, and risk management, advising government leadership and the Authorizing Official (AO) while ensuring alignment with DoD cybersecurity requirements and Zero Trust principles.

The ideal candidate brings deep expertise in cybersecurity governance, Zero Trust architecture, mission-based cyber risk, and secure software development, with the ability to translate complex technical risks into operational mission impacts. This individual will assess overall risk posture, guide cybersecurity policy and standards, and oversee security across the software lifecycle, including DevSecOps, Infrastructure as Code (IaC) scanning, and cloud-native security controls such as CSPM and CNAPP.

Key Responsibilities

• Serves as the senior Subject Matter Expert (SME) and strategic advisor on all cybersecurity matters. This role is responsible for leading policy analysis, providing expert oversight, and delivering formal recommendations to government leadership and the Authorizing Official (AO).
• Leads the strategic oversight of the cybersecurity program, ensuring alignment with DoD and DON policy. Authors, reviews, and updates cybersecurity standards, policies, and guidance
• Provides expert analysis of the program's Zero Trust architecture effectiveness, ensuring principles are correctly implemented
• Validates the program's overall risk posture derived from Mission-Based Cyber Risk Assessments (MBCRA), ensuring technical risks are accurately translated to operational mission impacts for the AO
• Oversees the security of the software lifecycle, validating the effectiveness of security within DevSecOps pipelines, IaC scanning, and cloud-native security controls (e.g., CSPM, CNAPP)

• Active TS/SCI clearance
• Bachelor's Degree from an accredited institution in Cybersecurity, Computer Science, Information Technology, or a related technical field, and 10 years of relevant
  
  • Or High School Diploma and 18 years of relevant experience
  
  
• IAT Level III (CISSP, CASP+/SecurityX, CSSLP or Equivalent)