Cybersecurity Analyst - RMF/ATO & DoD Cloud

Fleet Glass Services, Inc.; Fairfax, Northern (VA, KY); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

PTO and holidays

Tuition reimbursement

Bonus program

Training opportunities

Job summary

Concept Plus is seeking a seasoned Cybersecurity Analyst to support a critical software modernization project for a federal client in Fairfax, VA. You will translate complex business needs into cybersecurity requirements, maintain RMF/ATO artifacts, and drive secure, iterative delivery within an Agile/DevSecOps framework.

The role requires DoD experience and active security credentials, with collaboration across ISSMs, AO, and governance teams to ensure risk mitigation and timely decision-making.

Qualifications

• US Citizen with an active DoD Secret Clearance (or ability to obtain one).
• Bachelor’s Degree in an IT related field.
• 8+ years of experience as Cyber Analyst.
• 5+ years’ experience with ATO procurement in Cloud Environment.
• 5+ years in DoD Environment.
• 5+ Years Experience operating the Enterprise Mission Assurance Support Service Application (eMASS).

Responsibilities

• Lead and maintain the full RMF/ATO lifecycle, managing security authorization packages and updating SSPs, POA&Ms, risk assessments, and continuous monitoring artifacts.
• Ensure system confidentiality, integrity, and availability through compliance with NIST 800-53, DoDI 8500.01, DoDI 8510.01, and related DoD cybersecurity policies.
• Support Agile/DevSecOps deployments, integrating cybersecurity requirements into sprints, CI/CD pipelines, release schedules, and system design reviews.
• Perform vulnerability scanning, assessment, and remediation—using Nessus, eMASS, SonarQube, Checkmarx, Trivy, Dependency Track—and ensure compliance with DISA STIGs.
• Perform cloud-focused vulnerability scanning, assessment, and remediation using Nessus, eMASS, SonarQube, Checkmarx ensuring compliance with cloud security baselines.
• Provide security engineering support, including secure architecture input, SSO/SSL integration, secure configuration guidance, and API/cloud security reinforcement.
• Collaborate with technical teams, ISSMs, and AO representatives to support audits, inspections, security reviews, and risk mitigation activities.
• Track, report, and respond to cybersecurity incidents, ensuring timely coordination and recovery actions.
• Develop and maintain key cybersecurity documentation, including ISAs, MOAs, SoD matrices, architecture diagrams, and application/database security artifacts.
• Monitor project progress and deliver clear, actionable cybersecurity reports and risk insights to leadership and government stakeholders.
• Communicate effectively with internal teams, customers, and stakeholders in a clear, concise, and professional manner.

Skills

RMF/ATO lifecycle

Cybersecurity policy

Vulnerability assessment

Security engineering

Education

Bachelor’s degree in IT

Tools

Nessus

eMASS

SonarQube

Checkmarx

Trivy

Dependency Track

Job description

Concept Plus is seeking a seasoned Cybersecurity Analyst to support a critical software modernization project for a federal client in Fairfax, VA. You will translate complex business needs into cybersecurity requirements, maintain RMF/ATO artifacts, and drive secure, iterative delivery within an Agile/DevSecOps framework.

The role requires DoD experience and active security credentials, with collaboration across ISSMs, AO, and governance teams to ensure risk mitigation and timely decision-making.