Cybersecurity Analyst, Journeyman

KAIROS, Inc.; Saint Inigoes Shores (MD); Hybrid; USD 85,000 - 100,000; Full time

Benefits offered by this job

Health benefits

Competitive salary

Job summary

KAIROS, Inc. is seeking a Cybersecurity Analyst, Journeyman, to support RMF A&A packages for DoD systems. The role requires hands-on RMF implementation, vulnerability assessment, and documentation.

The ideal candidate holds a bachelor's degree in cybersecurity or related field and one of Security+ CE, CGRC, CASP+ CE, or CISSP, with 3–7 years of RMF experience and proficiency in eMASS and Nessus. Hybrid work with on-site days at St. Inigoes, MD.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, IT, or related field.
• One of the following certifications: Security+ CE, CGRC, CASP+ CE, CISSP.
• 3–7 years of RMF and A&A package development experience.
• Experience with the eMASS tool is required.

Responsibilities

• Assess system vulnerabilities and implement risk mitigation strategies.
• Ensure security controls safeguard digital files and infrastructure.
• Lead RMF processes from start to finish and support accreditation packages.
• Create and maintain RMF artifacts and STIG/Nessus scans.
• Draft and track POA&Ms; report status to leadership.
• Collaborate with ISSM, ISSEs, and System Administrators to ensure compliance.

Skills

Communication

Organization

Customer relations

Self-motivation

MS Office

Teamwork

Independent work

Multi-tasking

Detail-oriented

Interpersonal skills

Adaptability

Education

Bachelor's degree in cybersecurity

Tools

eMASS

Nessus

ACAS

RMF/A&A tools

Job description

KAIROS, Inc is searching for an energetic, experienced, and highly motivated Cybersecurity Analyst, Journeyman, to join our team. This position will work a hybrid schedule with at a minimum of two days a week on site work at St. Inigoes, MD.

Established in July 2013, KAIROS, Inc. is a growing Woman Owned Small Business (WOSB) providing full life cycle Cybersecurity, Program Management, Engineering, Logistics, Additive Manufacturing, and Training and Education services focused on optimizing customers’ program performance and mission through proven methodologies and ethical practices. Our headquarters is in California, MD near Naval Air Station Patuxent River. We offer competitive salaries and benefits with outstanding growth potential.

• We offer competitive salaries and benefits with outstanding growth potential.
• KAIROS also provides a comprehensive benefits package as additional employee compensation.

This position will perform cybersecurity analysis and support required for Risk Management Framework (RMF) Assessment and Authorization (A&A) packages supporting the Airborne Systems Integration (ASI) and Combat Identification Systems (IDS) Divisions at Webster Outlying Field (WOLF). The candidate, serving in the role of Information System Security Engineer (ISSE), will plan, implement, upgrade, or monitor security measures for the protection of tactical systems and information.

Primary Duties:

• Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies.
• Ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure.
• Manage all aspects of the RMF process from start to finish and support accreditation package development through customer acceptance.
• Fully understand and execute all RMF steps necessary for creating A&A packages in accordance with DoD, Defense Information Systems Agency (DISA), and Federal cybersecurity requirements.
• Perform ACAS scans and complete Security Technical Implementation Guides (STIGs) on the systems or networks under test, as required.
• Develop and maintain required RMF artifacts.
• Monitor and maintain system Enterprise Mission Assurance Support Service (eMASS) records.
• Conduct Cybersecurity testing analysis and provide overall vulnerability and risk assessment reports.
• Draft, track and monitor Plan of Action and Milestones (POA&Ms).
• Work closely with the Information Systems Security Manager (ISSM), assigned Information System Security Engineer(s) and System Administrators to ensure system compliance with Federal and DoD regulations, and cybersecurity best practices.
• Prepare detailed descriptions of issues, status updates, recommendations, and reports for all levels of the organization.
• Serve as the system’s primary action officer with regards to cybersecurity.

Skills and Qualifications:

• Strong facilitation skills when communicating results of findings
• Well organized and a strong attention to detail
• Strong customer relations, analytics, and documentation skills
• Self-starter, highly motivated, strong work ethic with a commitment to quality
• Microsoft office suite proficiency, i.e., Word, Excel, PowerPoint
• Ability to work within a challenging, fast-paced, team-oriented environment
• Ability to work independently
• Ability to multi-task and meet competing, deliverable deadlines
• Detail oriented
• Excellent interpersonal and customer service skills
• Excellent verbal and written communication skills to provide clear status and/or adequately communicate issues
• Ability to adapt to evolving technology

Education and Experience:

• Bachelor’s degree in cybersecurity, computer science, IT, or another related field (required).
• At least one (1) of the following certifications required:
  • Security + CE
  • CGRC (formerly CAP)
  • CASP+ CE
  • CISSP
• Three (3) to seven (7) years of experience with RMF and A&A package development (required).
• Experience with eMASS tool (required).
• Experience with security/validation testing tools to include vulnerability scanners (Nessus) and DISA STIGs (desired).
• Experience with Navy RMF Process Guide and Standard Operating Procedures (SOPs) (desired).
• Experience applying RMF/cybersecurity to tactical systems (desired).
• Experience working in a DoD environment (Contractor/Civilian/Military) (desired).

Clearance:

This position is subject to a government security investigation and must meet eligibility requirements for access to classified information. In order to complete the requirements for government security clearance investigation you must be a U.S. Citizen and be able to complete the full background investigation. This position requires an Active Secret Security Clearance. Candidate must have the ability to obtain a Top-Secret Security Clearance.

Compensation:

While skills, education, and experience are key factors, they are not the sole determinants of salary. Other determining factors include but are not limited to location, contract budgets and requirements, and government labor category guidelines. The estimated salary range for this position is $85,000 to $100,000.