Cybersecurity Analyst | RMF/ATO Lead for DoD Cloud

conceptplus

United States

On-site

USD 100,000 - 140,000

Full time

3 days ago

Be an early applicant

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Benefits offered by this job

Health, dental, vision insurance

Paid time off

11 paid holidays

Performance bonuses

Tuition reimbursement

Unlimited training

Job summary

Concept Plus seeks a highly capable Cybersecurity Analyst to support a critical software modernization initiative for a government-facing client. You will analyze mission-focused requirements, streamline processes, and translate complex business needs into actionable cybersecurity insights within an Agile/DevSecOps framework.

The role requires a DoD Secret clearance, 8+ years in cyber analysis, and 5+ years in cloud ATO.

Qualifications

US Citizen with an active DoD Secret Clearance or ability to obtain one.
Bachelor's Degree in an IT related field.
8+ years of experience as Cyber Analyst.
5+ years' experience with ATO procurement in Cloud Environment.
5+ years in DoD Environment.
5+ Years Experience with the Risk Management Framework Process.
5+ Years Experience operating the eMASS application.

Responsibilities

Lead and maintain the RMF/ATO lifecycle, updating SSPs, POA&M, risk assessments and continuous monitoring artifacts.
Ensure system confidentiality, integrity, and availability per NIST 800-53 and DoD policies.
Support Agile/DevSecOps deployments, integrating cybersecurity requirements into sprints, CI/CD pipelines and design reviews.
Perform vulnerability scanning, assessment, and remediation using listed tools and ensure DISA STIG compliance.
Provide security engineering input, including secure architecture, SSO/SSL integration, and API security reinforcement.
Collaborate with ISSMs and AO representatives to support audits, inspections, and risk mitigation.
Track, respond to cybersecurity incidents, and deliver risk insights to leadership and stakeholders.
Communicate effectively with internal teams, customers, and government stakeholders.