Cybersecurity Analyst/Information Assurance (TS/SCI)

RedSky; Tampa (FL); On-site; USD 110,000 - 150,000; Full time

Job summary

RedSky seeks a Cybersecurity Analyst/Information Assurance professional to support DoD missions in a knowledge management focused environment. The role requires maintaining TS/SCI readiness with a Secret/TS posture across RMF, STIGs, and continuous monitoring.

You will bridge enterprise knowledge management with DoD security controls and drive CCRI readiness and IAVM compliance. Responsibilities include leading searches for STIG gaps, supporting ATO activities, and producing security status

Qualifications

• Active Secret/TS clearance.
• 5+ years supporting RMF in a DoD environment.
• 3+ years supporting full ATO lifecycle.
• 3+ years applying STIGs across the stack (M365, Windows, SQL, Azure, AD, IIS, .NET, custom apps).
• 3+ years identifying STIG findings and remediation.
• 3+ years CCRI readiness and internal audits.
• 3+ years CCRI remediation tracking.
• 3+ years IAVM directive tracking and compliance.
• 2+ years SSPs for enterprise systems with DoD format.
• 2+ years producing security status reports and risk summaries.

Responsibilities

• Bridge between technical team and government security authorization framework.
• Ensure systems operate within approved security boundaries and maintain DoD compliance.
• Prepare for and support CCRI readiness reviews and findings.
• Produce CCRI remediation progress and IAVM compliance reports.
• Maintain SSPs and executive risk summaries.

Skills

RMF/NIST SP 800-37

STIGs

CCRIs and audits

IAVM compliance

Threat monitoring

Education

CompTIA Security+

CySA+

GICSP

GSEC

SSCP

Tools

Microsoft Defender for Office 365

Microsoft Defender for Endpoint

Defender for Cloud Apps

Microsoft Sentinel

Job description

Position: Cybersecurity Analyst/Information Assurance (TS/SCI)

Functional Labor Category:

Enterprise Knowledge Management

Location:

Tampa, Florida 33621; multiple locations domestic and international

Minimum Security Clearance:

TS/SCI

RedSky is seeking a Cybersecurity Analyst/Information Assurance (Secret/TS) to support the overall mission of the Department of Defense (DoD) by focusing on knowledge management, information sharing, collaboration, data, business processes, and digital capabilities. This effort provides significant opportunities for an upcoming program.

Responsibilities

As a Cybersecurity Analyst/Information Assurance (Secret/TS), you will be the bridge between the technical team that builds and operates Enterprise Knowledge Management and the government's security authorization framework. You will ensure that every system, application, platform, and data asset within the EKM program operates within an approved security boundary and maintains continuous compliance with DoD cybersecurity mandates.

Required Skills/Qualifications

• ACTIVE Secret/TS clearance
• Five (5+) years supporting Risk Management Framework (RMF) per NIST SP 800-37and DoDI 8510.01 in a DoD environment
• Three (3)+ years of experience supporting full ATO lifecycle — categorization, security control selection, implementation, assessment, authorization, continuous monitoring
• Three (3)+ years of experience applying DISA Security Technical Implementation Guides (STIGs) across the Enterprise Knowledge Management technology stack: M365 (Exchange Online, SharePoint Online, Teams, OneDrive), Windows Server, SQL Server, Azure, Active Directory / Entra ID, IIS, .NET, and custom web applications
• Three (3)+ years of experience identifying STIG findings and remediate or document mitigations
• Three (3)+ years of experience preparing for support and remediation findings from Command Cyber Readiness Inspection; (vulnerability management, configuration management, IAVM compliance, account management, physical security)
• Three (3)+ years of experience running CCRI dry runs conducting internal compliance reviews; internal audits of vulnerability scan results, STIG compliance, account reviews, privileged access audits, IAVM patch status, and documentation completeness
• Three (3)+ years of experience tracking, reporting, and managing CCRI remediation plans progress
• Three (3)+ years of experience tracking and enforcing Information Assurance Vulnerability Management (IAVM) directives achieving and maintaining 100% IAVM compliance — IAVAs, IAVBs, IAVMs
• Three (3)+ years of experience with Microsoft Defender for Office 365, Defender for Endpoint, Defender for Cloud Apps, and Microsoft Sentinel in GCC High / IL5-IL6; security baseline configuration; attack simulation
• Two (2)+ years of experience writing comprehensive SSPs for enterprise-scale systems-of-systems; DoD-formatted SSPs with complete control implementation narratives
• Two (2)+ years of experience producing monthly security status reports, CCRI readiness dashboards, IAVM compliance reports, POA&M aging reports, and executive risk summaries
• CompTIA Security+ certification
• CySA+ certification
• GICSP certification
• GSEC certification
• SSCP certification

RedSky LLC is an equal opportunity employer.

Our policy is to provide fair and equal employment opportunities for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability. RedSky hires and promotes individuals solely based on their qualifications for the job to be filled. RedSky believes that associates should be provided with a working environment that enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability.

We expect and require the cooperation of all associates in maintaining a discrimination and harassment-free atmosphere.