Cybersecurity Analyst​/ISSE ; ATO Focus

Job Title:Cybersecurity Analyst (RMF/ATO) - SECRET Clearance Required

Location:Vandenberg Space Force Base (VSFB), CA (On-site)

Clearance:Active SECRET Clearance Required; U.S. Citizenship required

Job Type:Full-time

Contract Type:Government Contract (Base Year + 4 Option Years)

We are seeking a dedicated Cybersecurity Analyst to lead the Authority to Operate (ATO) compliance efforts for the On-premises Safety Analysis System (SAS) and its classified counterpart (SAS-C) at Vandenberg Space Force Base. This role focuses heavily on the Risk Management Framework (RMF) lifecycle, vulnerability management, eMASS documentation, and continuous monitoring, ensuring the systems meet NIST SP 800-53 Revision 5 requirements.

The ideal candidate is a cybersecurity professional with deep knowledge of DoD security frameworks and proven experience managing ATO packages from initiation to authorization. This position requires an on-premises presence, as the SAS systems are not accessible via external connections.

This is a non-personal services contract position. The contractor employee reports directly to the Prime Contractor for all human resources, disciplinary, and administrative matters, while receiving work direction and prioritization from SLD 30/RM management and the Information Systems Security Engineer (ISSE).

• Manage the ATO application process for the SAS/SAS-C systems to completion, utilizing NIST SP 800-53 Revision 5 requirements with a goal of completion by the end of FY27.
• Implement continuous monitoring practices in accordance with Department of War (DoW) standards to proactively identify and mitigate potential cyber threats, reducing the risk of cyber breaches.
• Establish and manage an ACAS server that applies appropriate Security Technical Implementation Guides (STIGs) to the SAS/SAS-C systems.
• Conduct weekly security tests and ongoing security monitoring to identify and mitigate potential vulnerabilities, in alignment with ATO policy.
• Gather and furnish system artifacts for the SAS/SAS-C systems, as specified by the ISSE, in a timely and comprehensive manner to support ongoing security assessments and compliance requirements.
• Work with the ISSE to implement security controls and ensure that vulnerabilities are identified and addressed in a timely manner.
• Enter, track, and manage Plans of Actions and Milestones (POA&Ms) and control implementations within eMASS.
• Perform all work using industry standards, to include Security Controls as specified in NIST 800-53 and approved by the system owner and ISSM.

• Ensure all created and maintained records remain the property of the Government and are returned upon contract completion.
• Maintain network integrity and safeguard against loss of materials.
• Comply with all security protocols outlined in the DD Form 254.

• Submit SAS and SAS-C ATO artifacts to the SLD 30/RM requiring office as per policy.
• Provide all application materials, controls, and POA&Ms to eMASS in accordance with ATO timelines.

• Education:High School Diploma or equivalent (Bachelor's Degree in Cybersecurity, Information Assurance, Computer Science, or related field preferred).
• Experience:Minimum 2-4 years of experience in DoD Risk Management Framework (RMF) and Authority to Operate (ATO) processes.
• Citizenship:U.S. Citizenship required.
• Security Clearance:Active SECRET clearance required;
  Must be eligible for a Common Access Card (CAC).
• Certifications:Must possess a current Information Assurance Technical (IAT) Level II certification (e.g., CompTIA Security+ CE). IAT Level III or CISSP certification is highly desired.
• Technical
  
  Skills:
  
  Expert knowledge of NIST SP 800-53 (Revision
  5), eMASS, ACAS, and Security Technical Implementation Guides (STIGs).
• Knowledge:Deep understanding of FISMA compliance, continuous monitoring practices, and DoD cybersecurity frameworks and policies.
• Language:Proficient in written and verbal English.
• Interpersonal:Ability to work cross-functionally with System Owners, ISSEs, and ISSMs to drive ATO success.
• Judgment:Ability to exercise sound judgment and work independently to accomplish goals while maintaining strict compliance with security protocols.

• Hours:Standard business hours, Monday through Friday (40 hours per week). Specific start/end times to be coordinated with government management.
• Location:Bldg. 8500, 1515 Iceland Ave, Vandenberg SFB, CA 93437.
• On-Site…