Cyber Analyst

Jobtailor; South Carolina; Hybrid; USD 110,000 - 160,000; Full time

Job summary

Jobtailor is seeking a cybersecurity professional to monitor the security posture of mission-critical systems, communicate risks, and collaborate with development, system administration, and test teams to maintain secure applications and environments.

This role includes RMF tasking for system accreditation, preparing customer deliverables, and providing information assurance expertise in support of US Navy and US Marine Corps missions, with hybrid work and up to 10% travel.

Qualifications

• Active DoD Secret clearance or higher required.
• Bachelor’s degree, preferably IT-related.
• 5+ years’ experience in cybersecurity, information assurance, system administration, or equivalent.
• Certifications meeting or exceeding DoD 8140 IAT Level II (e.g., CompTIA Security+ or CISSP).
• Knowledge of DoD cybersecurity policies, RMF, and NIST SP 800-53.
• Experience developing RMF artifacts and implementing security controls.
• Experience with DoD vulnerability assessment and compliance tools (eMASS, ACAS, STIGs, SRGs, SCAP, XCCDF).
• Knowledge of Linux/Windows, networks, and deployment environments.
• Excellent oral and written communication skills.
• Hybrid work capability; remote and onsite.
• Up to 10% local travel.
• Preferred: US Navy/USMC experience; cloud information assurance; DevOps familiarity; vulnerability tools.

Responsibilities

• Monitor and report the security posture of mission-critical systems.
• Communicate security risks and recommended mitigations.
• Collaborate with development, sysadmin, and test teams to maintain secure environments.
• Perform RMF tasking for system accreditation and authorization.
• Prepare and deliver customer deliverables and scope execution requirements.
• Provide information assurance expertise in support of US Navy/US Marine Corps missions.
• Collaborate with teammates while keeping the user mission first.
• Analyze, summarize, and report security vulnerabilities and weaknesses to leadership.
• Develop and implement mitigation strategies.
• Lead re-testing and re-evaluation of affected systems.

Skills

Strong RMF implementation

Cybersecurity expertise

Excellent communication

Independent work

Team collaboration

Travel up to 10%

US Navy/USMC domain knowledge

Education

Bachelor’s degree (IT-related)

Tools

eMASS

ACAS

STIGs

SRGs

SCAP

XCCDF

CI/CD DevOps tools

Vulnerability scanning tools

Job description

• Monitor and report the security posture of mission-critical systems
• Communicate security risks and recommended mitigations
• Collaborate with development, system administration, and test teams to maintain secure applications and environments
• Perform Risk Management Framework tasking for system accreditation and authorization
• Prepare and deliver customer deliverables and scope execution requirements
• Provide information assurance expertise in support of US Navy and US Marine Corps missions
• Collaborate with teammates while keeping the user mission first
• Analyze, summarize, and report security vulnerabilities and weaknesses to leadership
• Develop and implement mitigation strategies
• Lead re-testing and re-evaluation of affected systems

Requirements

• Active DoD Secret clearance or higher required
• Bachelor’s degree, preferably IT-related
• 5+ years’ experience in cybersecurity, information assurance, system administration, or equivalent combination to reflect knowledge and experience
• Certifications meeting or exceeding DoD 8140 IAT Level II requirements, such as CompTIA Security+ or CISSP
• Knowledge of DoD Cybersecurity policies, procedures, and practices, including RMF and NIST SP 800-53
• Experience developing RMF artifacts and implementing security controls
• Experience analyzing, summarizing, and reporting security vulnerabilities and weaknesses
• Experience with DoD vulnerability assessment and compliance reporting tools, including eMASS, ACAS, STIGs, SRGs, SCAP, and XCCDF
• Knowledge of cybersecurity, information technology, and network architecture
• Understanding of Linux and Windows operating systems, networks, network devices, deployment environments, and system/application security threats and vulnerabilities
• Experience working with developers and system administrators to identify, communicate, and resolve issues
• Experience developing and implementing mitigation strategies and leading re-testing and re-evaluation
• Excellent oral and written communication skills
• Ability to work independently and meet strict standards
• Ability to work in a hybrid environment with remote telework and onsite work
• Up to 10% local travel
• Desired: experience supporting US Navy or USMC systems
• Desired: experience with cloud information assurance
• Desired: familiarity with CI/CD DevOps processes and tools
• Desired: familiarity with vulnerability scanning tools
• Desired: active Top Secret security clearance

Core Competencies

Demonstrates expertise in cybersecurity and information assurance, with a strong focus on Risk Management Framework (RMF) implementation and compliance. Proficient in analyzing security vulnerabilities and developing mitigation strategies to support mission-critical systems for the US Navy and US Marine Corps.

Highest-signal resume keywords

• Active DoD Secret Clearance
• 5+ Years Cybersecurity Experience
• CompTIA Security+ or CISSP Certification
• Knowledge of DoD Cybersecurity Policies
• Experience with eMASS and ACAS Tools

ATS Optimization Keywords

Hard Skills

• Risk Management Framework (RMF)
• Cybersecurity
• Information Assurance
• Vulnerability Assessment
• Security Control ImplementationLinux Operating System
• Windows Operating System
• Network Architecture
• Mitigation Strategy Development
• Security Vulnerability Analysis

Soft Skills

• Excellent Oral Communication
• Excellent Written Communication
• Ability to Work Independently
• Collaboration with Teams
• User Mission Focus

Certifications & Qualifications

• CompTIA Security+
• CISSP
• DoD 8140 IAT Level II Certification

Industry Keywords

• US Navy
• US Marine Corps
• Cybersecurity Policies
• NIST SP 800-53
• Vulnerability Scanning Tools

Tools & Technologies

• EMASS
• ACAS
• STIGs
• SRGs
• SCAP
• XCCDF
• Cloud Information Assurance
• CI/CD DevOps Processes