Cyber Security Analyst - RMF; ISSO Security Clearance

Position: Cyber Security Analyst - RMF (ISSO) with Security Clearance
Job Overview

Job Title:

Cyber Security Analyst - RMF (ISSO)

Location:

Pope Army Airfield, Fort Bragg, NC This position is pending contract award.

Job Responsibilities Trace Systems is seeking an experienced ISSO - RMF Analyst to support a global transport network supporting the US Special Operations Command and mission partners. The ISSO will provide ISSO and RMF support for enterprise, tactical, and transport network infrastructures supporting mission-critical operations.
* Monitor, assess, and maintain the cybersecurity posture of information systems across classified and unclassified environments.
* Support RMF activities throughout the system lifecycle, including system categorization, control implementation, assessment, authorization, and continuous monitoring.
* Work closely with system administrators, network engineers, cybersecurity teams, government stakeholders, and OEM partners to ensure systems remain secure, compliant, and operationally available.
* Perform root-cause analysis of cybersecurity incidents, vulnerabilities, compliance deficiencies, and operational disruptions while documenting findings and corrective actions.
* Develop, maintain, and update Authorization to Operate (ATO) packages, security documentation, System Security Plans (SSPs), Security Assessment Reports (SARs), POA&Ms, and related RMF artifacts.
* Support implementation and validation of NIST 800-53 security controls, DISA STIGs, Security Technical Implementation Guides (STIGs), and other cybersecurity requirements.
* Conduct vulnerability assessments, security reviews, compliance audits, and risk assessments to identify and remediate security weaknesses.
* Prepare and deliver cybersecurity status reports, risk assessments, compliance summaries, outage summaries, and executive briefings to customer leadership.
* Provide cybersecurity guidance and technical assistance to users operating from headquarters, regional hubs, remote sites, and forward-deployed locations.
* Participate in system upgrades, technology refresh efforts, patch management activities, and configuration management processes to maintain secure system operations.
* Maintain cybersecurity documentation, architecture diagrams, standard operating procedures, security baselines, and knowledge management repositories.
* Coordinate activities with engineering teams, cybersecurity personnel, logistics support teams, and program management staff to ensure mission success.
* Support Information Assurance (IA), Risk Management Framework (RMF), Continuous Monitoring (Con Mon), vulnerability management, and cybersecurity compliance activities.
* Utilize eMASS, ACAS, HBSS/ESS, SCAP, and other cybersecurity tools to track system compliance, vulnerabilities, and remediation efforts.
* Assist with security architecture reviews, system accreditation activities, risk mitigation planning, and modernization initiatives supporting customer objectives.
* Support incident response activities, forensic investigations, corrective action planning, and cybersecurity reporting requirements as required.
* Support occasional travel requirements, site surveys, security inspections, compliance assessments, and field cybersecurity support activities as required.

Minimum Qualifications
* Active, in-scope US Government issued Secret clearance.
* Due to the nature of the work and contract requirements, US Citizenship is required.
* Candidates must meet the qualification requirements of DoDM  / Intermediate for an applicable Cybersecurity, Information Systems Security, Security Control Assessment, or RMF-related work role (Education, DoD Military/Training, Certification, or a combination thereof), as defined by the applicable contract. Qualification Pathways (One or More May Apply)
* Education (OR)
* Bachelor's degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, Software Engineering, or related technical field OR equivalent combination of education and experience.
* DoD/Military Training (OR)
* Certification such as CompTIA Security+, CEH(P), GMON, GRID, Cloud+, FITSP-O, GCED, GDSA, GSEC, Pen Test+, or other approved cybersecurity certifications.
* Ability to travel worldwide, including to remote or austere locations. Individual trips may extend up to two months, with the possibility of multiple trips per year.
* Demonstrated experience supporting Risk Management Framework (RMF) activities, cybersecurity compliance efforts, and system authorization processes within DoD environments.
* Hands-on experience supporting cybersecurity compliance programs, Authorization to Operate (ATO) packages, security control implementation, and continuous monitoring activities.
* Working knowledge of NIST 800-53 security controls, RMF lifecycle processes, STIG implementation, vulnerability management, POA&M development, eMASS, and cybersecurity compliance requirements.
* Experience conducting security control assessments, log reviews, vulnerability analysis,…