USAF - Jr. Cybersecurity Analyst
On-siteEllsworth, Maine, United States
Job Summary
Support the full RMF lifecycle, including security control selection, implementation tracking, evidence collection, validation, authorization, and continuous monitoring. Develop and maintain authorization artifacts such as SSPs, RARs, and POA&Ms while entering, validating, and reconciling data in eMASS and ITIPS. Review control implementation statements for completeness, identify gaps for senior review, and assist in developing mitigation strategies for vulnerability assessments. Track remediation milestones, closure evidence, and ATO expiration dates across assigned systems. Coordinate with system owners, ISSOs, engineers, and program offices to clarify discrepancies and advance remediation actions. Assist in preparing A&A decision staff packages, status reports, and leadership briefing materials. Participate in status meetings, technical reviews, and governance forums to record actions and maintain supporting documentation. Support COOP, contingency, and incident activities when requested by the PMO.
Required Qualifications
- Active TS/SCI SSBI clearance
- B.S. Computer Science, Information Technology, or a related field
- 10+ years of RMF/Cybersecurity experience
- Foundational experience or education in cybersecurity, information assurance, RMF, security compliance, information systems, or a closely related discipline
- Working knowledge of the RMF and Assessment and Authorization lifecycle, including security controls, implementation evidence, risk assessment, authorization artifacts, and continuous monitoring
- Ability to develop and maintain SSPs, RARs, POA&Ms, assessment findings, inventories, and related authorization documentation with senior guidance
- Ability to learn and use eMASS and ITIPS and to maintain accurate data across multiple systems and recurring reporting cycles
- Basic understanding of vulnerability assessment, risk analysis, remediation tracking, residual risk, and POA&M lifecycle management
- Strong analytical, technical writing, documentation, quality-control, organization, and attention-to-detail skills
- Ability to communicate professionally with system owners, security personnel, engineers, program offices, and Government stakeholders
- Ability to manage multiple assignments and deadlines, protect sensitive information, and escalate discrepancies or risks promptly
- One to three years of relevant cybersecurity, information assurance, compliance, vulnerability-management, audit, or federal IT experience; internships and military experience may be considered
- A current credential satisfying the applicable IAM Level II and DoD 8140 722-Intermediate qualification requirements
- Coursework or hands-on exposure to NIST SP 800-53, DoD RMF, eMASS, vulnerability scanning, POA&M tracking, control assessment, and technical documentation
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.