Information Security Analyst

I2X Technologies is seeking an Information Security Analyst to support a customer in Colorado Springs, Colorado on-site. This position focuses on Risk Management Framework (RMF) execution, continuous monitoring and Authority to Operate (ATO) sustainment, and maintaining authorization artifacts to support readiness.

The analyst will perform RMF-related activities across multiple enterprise systems and enclaves, using eMASS to manage system registrations, security baselines, and evidentiary records. The role also includes operating at an ISSO-level ownership model to sustain continuous monitoring and support a Cyber Operational Readiness Assessment (CORA)-ready posture.

• Support and execute the RMF process across multiple enterprise systems and enclaves by maintaining system registrations, security baselines, and evidentiary records within Enterprise Mission Assurance Support Service (eMASS).
• Independently drive continuous monitoring and ATO sustainment with ISSO-level ownership to maintain a robust security posture.
• Maintain cybersecurity standards and operational hygiene to support a Cyber Operational Readiness Assessment (CORA)-ready posture.
• Support continuous posture management by identifying mitigations needed to meet DoDD 8500.01
  , DoDI 8510.01
  , DoDD 8140.01
  , and NIST SP 800-53 requirements.
• Analyze and correlate scan results from ACAS
  , SCAP
  , and other approved tools to evaluate system risk, security posture, and maintain ATO and Assess Only authorizations.
• Assist with system categorization in accordance with CNSSI 1253
  , including confidentiality, integrity, and availability impact levels, as information types, mission profiles, and system interconnections change.
• Lead the development, maintenance, and technical validation of System Security Plans (SSPs), ensuring evidentiary artifacts reflect current technical architectures and applicable STIGs are implemented.
• Exercise end-to-end ownership of Plans of Action and Milestones (POA&Ms) by evaluating deficiencies, determining risk impacts, and coordinating with technical stakeholders to achieve timely closure.
• Coordinate with system administrators, network engineers, and leadership to remediate STIG findings, vulnerability scan results, and architectural deficiencies.
• Provide strategic cybersecurity guidance, risk assessments, and status updates to system owners and leadership.
• Submit weekly status reports summarizing accomplishments across assigned packages, risk posture, issues, and next steps.
• Create, refine, and enforce operational policies, procedures, and artifacts to ensure security controls are implemented and audit-ready.

• Certification (DoD 8140.03 Intermediate level): Certification required, such as CompTIA Security+ or equivalent.
• Education and experience: Bachelor’s degree in information assurance, cybersecurity, or a related field plus 3–5 years of relevant experience; or high school diploma or equivalent plus 7–10 years of relevant information assurance or cybersecurity experience.
• DoD systems experience: At least 2 years direct experience serving as an ISSO or cybersecurity practitioner supporting DoD systems, including direct experience managing RMF lifecycle artifacts and end-to-end eMASS package management across multiple concurrent systems.
• Proven experience authoring, tracking, and coordinating technical remediation to drive POA&Ms to validated completion.
• Demonstrated ability to operate with a high degree of autonomy and lead cross-functional technical teams through complex authorization life cycles.
• Ability to work effectively in a team-focused, dynamic, high-tempo operational environment.
• Experience using STIG Viewer and automated compliance tools.
• Prior experience…