Cybersecurity Analyst / ISSO

Sprymethods; Stafford (VA); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical Coverage

Dental Coverage

Vision Coverage

Paid Holidays

PTO

Training Benefit

401(k)

Job summary

Spry Methods is a proven provider of mission-focused technology, cybersecurity, and program management solutions supporting critical Federal and DoD missions. We seek a strategist who can evaluate AI/ML risk and direct RMF authorization efforts to meet NIST standards, STIGs, and CTOs.

In this role you will lead CND architecture, zero-trust integration, and policy development, ensuring secure, mission-ready environments across multiple platforms.

Qualifications

• 4-8 years of progressive experience in DoD cybersecurity, information assurance, or Computer Network Defense (CND).
• Active Secret clearance
• DoD 8140/8570.01-M Baseline Certification: IAM Level II or III (e.g., CISSP, CISM, CAP/CGRC) AND highly recommended to hold a CSSP Auditor/Manager baseline.

Responsibilities

• Lead cybersecurity risk management across enterprise systems, assessing AI/ML capabilities and DoD AI security guidelines.
• Oversee RMF A&A lifecycles through eMASS and related workflows.
• Direct POA&M remediation strategies across multiple systems and timelines.
• Interpret and implement DoD CTOs, MFCC/DCDC directives, and cyber messages.
• Validate security controls and STIG compliance on Windows, Red Hat Linux, Cisco IOS/ASA.
• Apply zero-trust concepts across system design and lifecycle tracking.

Skills

AI Risk

RMF Leadership

CND Oversight

Zero-Trust

NIST SP 800-53

STIG Validation

SCC & eMASS

Cyber Policy Drafting

POA&M Management

DoD Cyber Directives

Education

DoD 8570 Baseline Certification

Tools

DISA STIG Viewer

SCAP Compliance Checker

eMASSter

STIG/SRG Validation

Windows

Red Hat Linux

Cisco IOS

Cisco ASA

Job description

Company Overview

Spry Methods is a proven provider of mission-focused technology, cybersecurity, and program management solutions supporting critical Federal and DoD missions. We specialize in delivering integrated, high-impact solutions across cyber operations, enterprise resource management, and mission support services. Our culture emphasizes collaboration, accountability, and innovation - empowering our teams to deliver meaningful outcomes in complex, high-security environments.

Who We’re Looking For (Position Overview):

This role requires a strategic understanding of how emerging technologies (like A.I.) and high-level USMC Cyber Directives impact the acquisition lifecycle and overall enterprise risk posture.

Leading cybersecurity risk management efforts across enterprise systems by assessing AI and machine learning capabilities, overseeing RMF authorization activities, managing POA&M remediation strategies, and ensuring compliance with DoD cybersecurity directives and NIST standards. Responsibilities include evaluating system architectures through a zero-trust lens, interpreting and implementing Cyber Tasking Orders, validating security controls and STIG compliance, developing cybersecurity policies and continuous monitoring strategies, and providing technical leadership to maintain secure, mission-ready environments.

• A.I. Risk & Architecture: Experience assessing the risk of Artificial Intelligence (A.I.) and Machine Learning (ML) capabilities, including familiarity with emerging DoD A.I. security guidelines, data pipeline security, and assessing A.I. toolsets within the authorization boundary.
• DoD/ DoW Cyber Directives: Proven capability to interpret, analyze, and direct programmatic responses to MFCC (Marine Forces Cyber Command) and DCDC (Department of Defense Cyber Defense Command) TaskOrds, Cyber Tasking Orders (CTOs), and other organizational directives, policies, and messages governing cyber / IT.
• Strategic POA&M Management: Expert-level creation, management, and strategic burn-down of complex Plan of Action and Milestones (POA&M)s across multiple enterprise systems, ensuring alignment with USMC continuous monitoring timelines / requirements.
• CND Oversight: Advanced understanding of Computer Network Defense (CND) architectures, including zero-trust principles, network boundary defense, and threat intelligence integration.
• RMF Leadership: Deep expertise navigating eMASS and leading systems through the complete Risk Management Framework (RMF) Assess and Authorize (A&A) lifecycles and workflows.
• Deep understanding of NIST SP 800-53 security controls, CNSSI 1253, NIST SP 800-161 & NIST SP 800-162, and DoDI 8510.01.
• Experience drafting organizational cybersecurity policies, Incident Response Plans, and Continuous Monitoring Strategies.
• Advanced proficiency using the DISA STIG Viewer, executing SCAP Compliance Checker (SCC), using eMASSter, and manually validating STIG/SRG requirements on diverse operating systems (Windows, Red Hat Linux, Cisco IOS, Cisco ASA).
• Expert level understanding of applying zero-trust methodologies to system design and tracking implementation throughout the system life-cycle.

• Experience Level: 4-8 years of progressive experience in DoD cybersecurity, information assurance, or Computer Network Defense (CND).
• Security Clearance: Active Secret clearance
• DoD 8140/8570.01-M Baseline Certification: IAM Level II or III (e.g., CISSP, CISM, CAP/CGRC) AND highly recommended to hold a CSSP Auditor/Manager baseline.

Perks of Working for Us (Benefits):

Medical Coverage - Cigna - 4 Options

- Traditional - PPO Open Access Plus Network

- (2) HDHP - PPO Open Access Plus Network

- HDHP - EPO Open Access Plus Network

Dental Coverage - Cigna - PPO Base & Buy-Up Plans

Vision Coverage - Principal - VSP Choice Network

Paid Holidays: Full-time employees receive 11 paid federal holidays

Paid Time Off (PTO) - PTO accrual starts at 15 days per year

Training Benefit - Annual training allowance available toward any job-related training or education

401(k) - Multiple Fund Choices through Fidelity with a company match

For our full list of benefits, please visit http://www.sprymethods.com/careers/benefits/

EEO Statement

At Spry, we believe talented and dedicated employees are our most valued assets and the foundation of our success. We are committed to crafting a diverse and inclusive workplace that endorses engagement, creativity, quality and innovation.

We are proud to be an affirmative action and equal opportunity employer and as such, we evaluate qualified candidates in full consideration without regard to race, color, religion, sex, sexual orientation, gender identity, marital status, national origin, age, disability status, protected veteran status, and any other protected status.