Cyber Security Analyst

SoTalent; Tucson (AZ); On-site; USD 80,000 - 110,000; Full time

Job summary

Sotalent is seeking a Cyber Security Analyst / ISSO to support classified information systems and cybersecurity operations. The role involves ensuring security across networks and maintaining RMF/NIST controls on-site in the United States.

Qualified candidates will have 1–2+ years of ISSO experience, Top Secret clearance, and hands-on expertise with auditing, continuous monitoring, and security documentation. On-site position with no remote option.

Qualifications

• Active Top Secret clearance and ability to obtain SCI access
• 1–2+ years of ISSO or comparable cybersecurity duties for classified systems
• Experience with JSIG, RMF, and NIST 800-53 controls
• Hands-on security auditing, continuous monitoring, and documentation

Responsibilities

• Perform ISSO responsibilities per JSIG, RMF, and NIST 800-53.
• Develop, maintain, and update SSPs, POA&Ms, security control docs, continuous monitoring reports, and audits.
• Implement, validate, and assess cybersecurity controls.
• Conduct system audits, risk assessments, and continuous monitoring activities.
• Support configuration management, including change reviews and baseline management.
• Provide incident response support, including investigation, documentation, and remediation.
• Support internal and external security inspections and assessments.
• Collaborate with cybersecurity, IT, and security leadership on compliance initiatives.

Skills

Communication

Analytical thinking

Problem solving

Technical writing

Team collaboration

Tools

Nessus/ACAS

SCAP Compliance Checker

STIG Viewer

Microsoft Group Policy

McAfee ePO

InsightVM

Rapid7 IDR

SIEM

Linux (RHEL 8/9)

Windows Hardening

Job description

Salary: $80,000–$110,000, depending on experience

A defense and national security organization is seeking a Cyber Security Analyst / Information Systems Security Officer (ISSO) to support classified information systems and cybersecurity operations.

This role will work alongside Cyber Security and IT teams to maintain security compliance, support risk management activities, and protect classified systems across networks with varying levels of complexity.

Key Responsibilities

• Perform ISSO responsibilities in accordance with JSIG, RMF, and NIST 800-53 requirements.
• Develop, maintain, and update security authorization documentation, including SSPs, POA&Ms, security control documentation, continuous monitoring reports, and audit records.
• Implement, validate, and assess cybersecurity controls.
• Conduct system audits, risk assessments, and continuous monitoring activities.
• Support configuration management, including system change reviews, baseline management, and change control.
• Provide incident response support, including investigation, documentation, and remediation of security events.
• Support internal and external security inspections and assessments.
• Collaborate with cybersecurity, IT, and security leadership teams on ongoing compliance and security initiatives.

Requirements

• Active Top Secret security clearance with the ability to obtain SCI access and a CI polygraph.
• 1–2+ years of experience performing ISSO or comparable cybersecurity duties supporting classified systems.
• Experience with JSIG, RMF, and NIST 800-53 security controls.
• Hands-on experience with security auditing, continuous monitoring, and cybersecurity documentation.
• Current IAT Level II certification or higher, such as Security+, CASP, CySA+, CISSP, or GSEC, or the ability to obtain one within three months of starting.
• Strong knowledge of Windows and Windows Server hardening.
• Experience with cybersecurity tools and STIG-related technologies such as Nessus/ACAS, SCAP Compliance Checker, STIG Viewer, and Microsoft Group Policy.
• Strong technical writing, communication, analytical, and problem-solving skills.
• Ability to work independently as well as collaboratively.
• Ability to lift up to 25 pounds.

Preferred Experience

• Knowledge of NIST 800-171 and ICD 503.
• Experience with SIEM and log analysis tools.
• Familiarity with technologies such as McAfee ePO, SCC, BitLocker, Rapid7 IDR, and InsightVM.
• Experience configuring, hardening, and managing Linux/RHEL 8 or 9 environments.

Compensation

Cyber Analyst / ISSO I: $80,000–$90,000

Cyber Analyst / ISSO II: $88,000–$110,000

Compensation will depend on experience, education, qualifications, and relevant technical skills.

Important: This is an on-site position with no hybrid or remote option. U.S. citizenship and an active Top Secret clearance are required for eligibility.