Cyber Security Analyst - RMF; ISSO

Job Overview

Job Title: Cyber Security Analyst - RMF (ISSO)

Location: Pope Army Airfield, Fort Bragg, NC

This position is pending contract award.

• Support 24/7/365 cybersecurity operations and compliance activities in support of mission-critical systems and global operations.
• Monitor, assess, and maintain the cybersecurity posture of information systems across classified and unclassified environments.
• Support RMF activities throughout the system lifecycle, including system categorization, control implementation, assessment, authorization, and continuous monitoring.
• Work closely with system administrators, network engineers, cybersecurity teams, government stakeholders, and OEM partners to ensure systems remain secure, compliant, and operationally available.
• Perform root‑cause analysis of cybersecurity incidents, vulnerabilities, compliance deficiencies, and operational disruptions while documenting findings and corrective actions.
• Develop, maintain, and update Authorization to Operate (ATO) packages, security documentation, System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, and related RMF artifacts.
• Support implementation and validation of NIST 800-53 security controls, DISA STIGs, Security Technical Implementation Guides (STIGs), and other cybersecurity requirements.
• Conduct vulnerability assessments, security reviews, compliance audits, and risk assessments to identify and remediate security weaknesses.
• Prepare and deliver cybersecurity status reports, risk assessments, compliance summaries, outage summaries, and executive briefings to customer leadership.
• Provide cybersecurity guidance and technical assistance to users operating from headquarters, regional hubs, remote sites, and forward‑deployed locations.
• Participate in system upgrades, technology refresh efforts, patch management activities, and configuration management processes to maintain secure system operations.
• Maintain cybersecurity documentation, architecture diagrams, standard operating procedures, security baselines, and knowledge management repositories.
• Coordinate activities with engineering teams, cybersecurity personnel, logistics support teams, and program management staff to ensure mission success.
• Support Information Assurance (IA), Risk Management Framework (RMF), Continuous Monitoring (Con Mon), vulnerability management, and cybersecurity compliance activities.
• Utilize eMASS, ACAS, HBSS/ESS, SCAP, and other cybersecurity tools to track system compliance, vulnerabilities, and remediation efforts.
• Assist with security architecture reviews, system accreditation activities, risk mitigation planning, and modernization initiatives supporting customer objectives.
• Support incident response activities, forensic investigations, corrective action planning, and cybersecurity reporting requirements as required.
• Support occasional travel requirements, site surveys, security inspections, compliance assessments, and field cybersecurity support activities as required.

• Active, in‑scope US Government issued Secret clearance.
• Due to the nature of the work and contract requirements, US Citizenship is required.
• Candidates must meet the qualification requirements of DoDM  / Intermediate for an applicable Cybersecurity, Information Systems Security, Security Control Assessment, or RMF‑related work role (Education, DoD Military/Training, Certification, or a combination thereof), as defined by the applicable contract. Qualification Pathways (One or More May Apply)
• Education (OR)
• Bachelor’s degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, Software Engineering, or related technical field OR equivalent combination of education and experience.
• DoD/Military Training (OR)
• Certification such as CompTIA Security+, CEH(P), GMON, GRID, Cloud+, FITSP‑O, GCED, GDSA, GSEC, Pen Test+, or other approved cybersecurity certifications.
• Ability to travel worldwide, including to remote or austere locations. Individual trips may extend up to two months, with the possibility of multiple trips per year.
• Demonstrated experience supporting Risk Management Framework (RMF)…