- Location
- Ellsworth, SD
- Workplace
- Onsite
- Type
- Full-time
- Department
- IT
- Education
- Bachelor
- Clearance
- Required
- Closing date
- Today
- Source
- ApplyToJob
Description
cFocus Software seeks a Jr. Cybersecurity Analyst to join our program supporting the United States Air Force. This position is onsite with the onsite location being in Ellsworth, South Dakota. This position requires a TS/SCI SSBI clearance.
Qualifications:
Qualifications:
- Active TS/SCI SSBI clearance
- B.S. Computer Science, Information Technology, or a related field
- 10+ years of RMF/Cybersecurity experience
- Foundational experience or education in cybersecurity, information assurance, RMF, security compliance, information systems, or a closely related discipline.
- Working knowledge of the RMF and Assessment and Authorization lifecycle, including security controls, implementation evidence, risk assessment, authorization artifacts, and continuous monitoring.
- Ability to develop and maintain SSPs, RARs, POA&Ms, assessment findings, inventories, and related authorization documentation with senior guidance.
- Ability to learn and use eMASS and ITIPS and to maintain accurate data across multiple systems and recurring reporting cycles.
- Basic understanding of vulnerability assessment, risk analysis, remediation tracking, residual risk, and POA&M lifecycle management.
- Strong analytical, technical writing, documentation, quality-control, organization, and attention-to-detail skills.
- Ability to communicate professionally with system owners, security personnel, engineers, program offices, and Government stakeholders.
- Ability to manage multiple assignments and deadlines, protect sensitive information, and escalate discrepancies or risks promptly.
- One to three years of relevant cybersecurity, information assurance, compliance, vulnerability-management, audit, or federal IT experience; internships and military experience may be considered.
- A current credential satisfying the applicable IAM Level II and DoD 8140 722-Intermediate qualification requirements.
- Coursework or hands-on exposure to NIST SP 800-53, DoD RMF, eMASS, vulnerability scanning, POA&M tracking, control assessment, and technical documentation
- Support the full RMF lifecycle, including security control selection, implementation tracking, evidence collection, validation support, authorization, and continuous monitoring.
- Assist with interpretation of federal, DoD, and Air Force cybersecurity policies and help translate requirements into system-level implementation actions.
- Develop, update, organize, and maintain authorization artifacts for multiple systems, including SSPs, RARs, POA&Ms, control evidence, inventories, diagrams, and supporting records.
- Enter, validate, reconcile, and maintain cybersecurity and authorization data in eMASS and ITIPS.
- Review security-control implementation statements and evidence for completeness, consistency, currency, and traceability; identify gaps for senior review.
- Support vulnerability assessments, analyze findings, document risk information, and assist in developing practical mitigation and remediation strategies.
- Track vulnerabilities, POA&M milestones, overdue actions, closure evidence, authorization status, and ATO expiration dates across assigned systems.
- Coordinate with system owners, ISSOs, engineers, program offices, and other stakeholders to collect artifacts, clarify discrepancies, and advance remediation actions.
- Assist with security-control assessment findings reports that document gaps, weaknesses, risk levels, and recommended remediation strategies.
- Support preparation of A&A decision staff packages, including control summaries, risk analysis, mission-impact information, and recommendations for ATO, ATO with Conditions, or Denial.
- Help prepare POA&M status reports, escalation reports, FM systems inventory/boundary updates, cybersecurity policy and guidance updates, and leadership briefing materials.
- Compile metrics and trend data for vulnerabilities, remediation progress, POA&M closure, artifact currency, authorization status, and other QASP-aligned measures.
- Participate in status meetings, technical reviews, governance forums, and AO decision support activities; record actions and maintain supporting documentation.
- Apply documentation governance, quality-control, naming, version-control, and records-management practices to all assigned work products.
- Support COOP, contingency, incident, and mission-continuity activities when requested by the PMO.
Skills
CybersecurityComplianceTechnical Writing
