Cyber ISSM Analyst

About the role

The candidate will support a Cyber Compliance Team providing ISSM‑Basic support for tactical systems. The role involves hardware and software cybersecurity analysis and assisting the Risk Management Framework (RMF) assessment and authorization process for data processing, test, and tactical systems.

Key responsibilities

• Provide accurate technical evaluations of equipment, software applications, full systems, or networks and document security posture against applicable NIST controls.
• Select and assess security controls, complete accreditation packages, formulate and implement mitigations, and maintain system security posture.
• Initiate, update, and maintain RMF packages in eMASS, and manage Authorization Packages and POA&M documentation.
• Monitor and evaluate system compliance with DoD security, resilience, and dependability requirements, performing validation and risk analysis at the software, system, and network levels.

Required profile

• U.S. citizen with the ability to obtain and maintain a US Secret security clearance (Top Secret/SCI eligibility is a plus).
• Meets DoDD 8140 ISSM‑Basic certification, education, and experience requirements.
• Associate’s degree in Engineering, IT, or a cyber‑related field (Bachelor’s degree preferred).

Required skills

• Experience with eMASS and RMF package development.
• Knowledge of NIST SP 800‑53, NIST SP 800‑160, and DoD STIG requirements.
• Proficiency with cybersecurity assessment tools such as ACAS, Nessus, SCC, and STIG Viewer.
• Familiarity with DoD IAVMs and risk mitigation processes.
• High proficiency in Microsoft Office Suite.