ISSO / RMF Cybersecurity Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
ISSO/RMF Cybersecurity Analyst guiding federal IT systems through RMF and ATO compliance. Managing security controls, vulnerabilities, continuous monitoring, and incident response for Xcelerate Solutions.
Responsibilities:
- Lead system categorization, security control selection, implementation, assessment, and continuous monitoring across the RMF lifecycle
- Develop, update, and maintain Security Authorization Packages, including SSPs, SARs, POA&Ms, and continuous monitoring plans
- Use government systems of record such as eMASS to document and track compliance packages
- Coordinate and conduct vulnerability scans using ACAS, Nessus, and SCAP Compliance Checker
- Analyze scan results, coordinate vulnerability remediation with technical teams, and document exceptions or POA&Ms
- Review DISA STIGs and SRGs to ensure secure system configurations
- Monitor and assess security controls continuously
- Assist with identifying, investigating, and reporting security incidents or anomalies
- Ensure log management, system auditing, and boundary protections comply with federal guidelines
- Advise technical development, systems engineering, and management teams on cybersecurity
- Ensure software features, infrastructure changes, and system updates follow security-by-design principles
- Support planning and execution of security control assessments conducted by external assessment teams
Requirements:
- Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or a related field; equivalent professional experience may be considered
- Minimum of 5+ years of experience in cybersecurity, information assurance, or IT compliance
- 3+ years of direct, hands-on experience guiding systems through the RMF process (Steps 1 through 7) to successful ATO determinations
- Deep working knowledge of NIST SP 800-37, NIST SP 800-53, and CNSSI 1253
- Direct experience using automated vulnerability assessment tools such as Nessus, ACAS, or SCC
- Proven experience managing and navigating security control databases such as eMASS
- Solid understanding of operating system security configurations for Windows and Linux
- Solid understanding of network security architectures
- Strong technical writing skills and ability to produce clear, structured compliance documentation
- Excellent communication and interpersonal skills
- Active DoD 8570.01-M / DoD 8140 IAM Level II certification or higher, or willingness to obtain
- U.S. citizenship
- Public Trust or favorably adjudicated Secret Clearance minimum to start
- Ability to adhere to government cybersecurity policies, OPSEC rules, and secure system access regulations
- Preferred: experience with FedRAMP, AWS GovCloud, Azure Government, secure software development, DevSecOps, Docker, Kubernetes, Section 508, defense contract execution, or secure federal program architectures
Benefits:
- Growth and development opportunities
- Great Place to Work certified company
- Reasonable accommodation if needed because of an applicant's or an employee's disability
Similar Jobs
Mid-Level Information Security Analyst, MSS
Analista de Segurança da Informação monitorando SOC, SIEM, Microsoft 365 Defender e firewalls para cliente empresarial da SEK. Atuando em incidentes, investigações e melhorias de segurança.
Cybersecurity Analyst, Consultant
Cybersecurity analyst protecting CybelAngel clients through alert investigation, leak detection, and incident reporting. Supporting cybersecurity solutions and contributing to dark-web research and product improvements.
Information Security Analyst
Information Security Analyst supporting IAM access provisioning, audits, and identity lifecycle management. Resolving access issues for corporate applications and systems across the United States.
National Security Analyst
National Security Analyst supporting U.S. Navy outreach events and public affairs at GDIT. Planning Fleet Weeks, Navy Weeks, executive engagements, and media activities.
Senior Information Security Analyst
Senior Information Security Analyst strengthening Golden 1 Credit Union’s cybersecurity controls. Leading vulnerability management, threat hunting, incident response, and compliance support for a California credit union.
Workday Analyst – Security Administration, Job Architecture
Senior Workday Analyst managing Workday security and job architecture for Lennar, a leading U.S. homebuilder. Governing HR data, audits, reports, and enterprise change.
Security Analyst
Security Analyst protecting Peraton subsidiary systems through CDM security, vulnerability scanning, and FISMA controls. Managing risk assessments, audits, incident response, and security tooling.
Security Analyst – Mid-Atlantic region
Security Analyst preventing and investigating cyber incidents for GuidePoint Security, a cybersecurity solutions and services provider. Monitoring SIEM, networks, endpoints, and logs across U.S. Eastern Time operations.
Security Analyst – Part-Time
Part-time Security Analyst strengthening wi-Q’s hospitality ordering platform security and compliance. Managing ISO 27001, PCI DSS, risk, access governance, and audit readiness.
Senior Threat Intelligence Analyst
Senior threat intelligence analyst researching cyber threats for Team Cymru, an internet threat intelligence company. Analyzing malicious infrastructure, producing intelligence reports, and guiding detection and analytics tooling.
Principal Workday Analyst – Security
Principal Workday Security Analyst leading security architecture and governance for Medtronic’s global healthcare technology platform. Protecting sensitive data, controls, and access across Workday modules.
Cyber Security Analyst
Cyber Security Analyst supporting First Quality’s personal care and household products businesses. Detecting threats, investigating incidents, tuning SIEM rules, and automating SOC response workflows.
Senior Cyber Security Analyst
Senior cloud security analyst engineering controls and defenses for GDIT, a technology and professional services provider to government and defense customers. Supporting CMS security operations, compliance, and Zero Trust initiatives.
Senior Director, Analyst – Cybersecurity, Emerging Technologies, CIO, AI Leaders
Gartner cybersecurity analyst researching AI, quantum, and cloud-native risks for CIOs and AI Leaders. Advising enterprise clients on security strategy, governance, technology selection, and transformation.
Cybersecurity Analyst
Cybersecurity Analyst supporting NIST-based risk assessments for Black Fox LLC’s public sector and commercial clients. Reviewing controls, documenting findings, and assisting cybersecurity consultants with reports and remediation tracking.
Security Analyst II
Security Analyst monitoring and responding to threats across customer environments for NexusTek, a managed IT and cybersecurity provider. Tuning Rapid7 detections, investigating incidents, and supporting compliance and SOC improvements remotely in the United States.
Security Analyst I
Security Analyst I monitoring and responding to cyber threats for Ntiva, a managed services provider. Investigating alerts, securing accounts, documenting incidents, and escalating complex cases.
IT Security Analyst – Level 1
Information Security Analyst protecting Spellman’s high-voltage electronics systems from cyber threats. Monitoring events, responding to incidents, and managing vulnerabilities across hybrid environments.
Senior Threat Intelligence Analyst
Senior Threat Intelligence Analyst prioritizing threats and vulnerabilities for Expel’s managed detection and response customers. Producing intelligence reports and guiding SOC analysts on emerging cyber threats.
Information Security Analyst
Information Security Analyst protecting ExamWorks’ healthcare-services systems and customer data. Managing vulnerabilities, firewalls, audits, security projects, and customer security support.