Cybersecurity Information Analyst

Sacramento Native American Health Center, Inc; Clearfield (UT); On-site; USD 100,000 - 125,000; Full time

Job summary

Sacramento Native American Health Center, Inc. seeks a Cyber Security Analyst to support DoD RMF activities and maintain robust security across programs.

You will collaborate with system owners, engineers, and government stakeholders to prepare SSPs, POA&Ms, and evidence for authorization. This on‑site role requires an active DoD Secret clearance, CISSP or equivalent, a bachelor’s degree in a related field, and about five years of cybersecurity experience.

Qualifications

• Active DoD Secret clearance required.
• CISSP certification or equivalent.
• Bachelor's degree or equivalent in a related field.
• Approximately 5 years of cybersecurity experience.

Responsibilities

• Support DoD RMF activities throughout the system lifecycle.
• Develop and maintain SSPs, POA&Ms, security control implementation statements, assessment evidence, and other authorization artifacts.
• Enter, update, and maintain RMF documentation in eMASS.
• Assist with system categorization, security control implementation, assessment, authorization, and continuous monitoring.
• Review and document compliance with applicable NIST security controls and DISA STIGs.
• Assist with vulnerability analysis, remediation tracking, and POA&M management.
• Collect and organize cybersecurity evidence supporting security control assessments and ATO activities.
• Support ACAS/Tenable vulnerability scanning and analysis, as applicable.
• Participate in cybersecurity assessments, audits, inspections, and authorization reviews.
• Coordinate with ISSMs, ISSOs, System Owners, engineers, Security Control Assessors, and other cybersecurity stakeholders.
• Identify cybersecurity issues and elevate complex technical or compliance matters to senior team members.
• Support configuration management and system change reviews for cybersecurity impact.
• Maintain accurate and complete cybersecurity documentation.

Skills

RMF knowledge

Documentation skills

Vulnerability management

Technical writing

Strong communication

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering or related discipline

Tools

eMASS

ACAS/Tenable

DISA STIG Viewer

SCAP tools

Job description

• Base Pay $100,000.00 - $125,000.00 / Year
• Job Category Cybersecurity Information Analyst
• Employee Type FT Exempt
• Required Degree 4 Year Degree
• Manage Others No

Description

Cyber Security Analyst

Salary Range $100,000 - $125,000

We are a contracted Federal drug-free workplace

We are seeking a Cyber Security Analyst to support Department of Defense (DoD) cybersecurity and Risk Management Framework (RMF) activities.

This position will work with other cybersecurity personnel, system owners, engineers, and government stakeholders to support RMF documentation, security control implementation, system authorization, vulnerability management, and continuous monitoring activities.

The position is primarily onsite with limited work-from-home flexibility, based on mission and customer requirements. An active DoD Secret clearance is required.

Key Responsibilities

• Support DoD RMF activities throughout the system lifecycle.
• Develop and maintain SSPs, POA&Ms, security control implementation statements, assessment evidence, and other authorization artifacts.
• Enter, update, and maintain RMF documentation in eMASS.
• Assist with system categorization, security control implementation, assessment, authorization, and continuous monitoring.
• Review and document compliance with applicable NIST security controls and DISA STIGs.
• Assist with vulnerability analysis, remediation tracking, and POA&M management.
• Collect and organize cybersecurity evidence supporting security control assessments and ATO activities.
• Support ACAS/Tenable vulnerability scanning and analysis, as applicable.
• Participate in cybersecurity assessments, audits, inspections, and authorization reviews.
• Coordinate with ISSMs, ISSOs, System Owners, engineers, Security Control Assessors, and other cybersecurity stakeholders.
• Identify cybersecurity issues and elevate complex technical or compliance matters to senior team members.
• Support configuration management and system change reviews for cybersecurity impact.
• Maintain accurate and complete cybersecurity documentation.

Required Qualifications

• Active DoD Secret clearance.
• CISSP certification or equivalent.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related discipline, or an equivalent combination of education and relevant experience as permitted by contract requirements.
• Approximately 5 years of cybersecurity, information assurance, information security, systems administration, or related experience.

Candidate must meet applicable DoD 8140 Cyber Workforce Qualification Program requirements for the assigned work role and proficiency level.

Relevant certifications or qualification pathways may include CISSP, CISA, CAP/CGRC, or other DoD-approved education, training, experience, or certification options applicable to the designated work role.

• Working knowledge of the DoD Risk Management Framework (RMF).
• Familiarity with NIST SP 800-37, NIST SP 800-53/53A, DISA STIGs, POA&Ms, vulnerability management, and ATO processes.
• Ability to develop clear and accurate technical documentation.
• Strong analytical, organizational, written, and verbal communication skills.

Preferred Qualifications

• Experience supporting DoD information systems or cybersecurity programs.
• Hands-on experience with eMASS.
• Familiarity with ACAS/Tenable, DISA STIG Viewer, SCAP tools, and vulnerability management.
• Experience supporting classified information systems.
• Familiarity with SSPs, POA&Ms, security control implementation statements, and continuous monitoring.

Summary

Work Arrangement

Primarily onsite with limited telework/work-from-home opportunities. Onsite presence is required for classified activities, customer meetings, system access, assessments, and other mission requirements.