DoD Cyber Analyst — RMF/ATO, Cloud & DevSecOps

RiseMe; United States; Remote; USD 120,000 - 150,000; Full time

Job summary

Concept Plus is seeking a highly capable Cybersecurity Analyst to support a critical software modernization initiative for a DoD-adjacent client. You will lead RMF/ATO processes, manage security artifacts, and ensure compliance with DoD policies in a fast-paced Agile/DevSecOps environment.

The role requires 8+ years as a Cyber Analyst, DoD experience, and strong documentation skills to produce risk insights and security artifacts for leadership and government stakeholders.

Qualifications

• US citizen with active DoD Secret Clearance (or ability to obtain one).
• Bachelor’s Degree in an IT related field.
• 8+ years of experience as Cyber Analyst.
• 5+ years’ experience with ATO procurement in Cloud Environment.
• 5+ years in DoD Environment.
• 5+ Years Experience with the Risk Management Framework Process.
• 5+ Years Experience operating the Enterprise Mission Assurance Support Service Application (eMASS).

Responsibilities

• Lead and maintain the full RMF/ATO lifecycle, managing security authorization packages and updating SSPs, POA&Ms, risk assessments, and continuous monitoring artifacts.
• Ensure system confidentiality, integrity, and availability through compliance with NIST 800-53, DoDI 8500.01, DoDI 8510.01, and related DoD cybersecurity policies.
• Support Agile/DevSecOps deployments, integrating cybersecurity requirements into sprints, CI/CD pipelines, release schedules, and system design reviews.
• Perform vulnerability scanning, assessment, and remediation using Nessus, eMASS, SonarQube, Checkmarx, Trivy, Dependency Track and ensure compliance with DISA STIGs.
• Perform cloud-focused vulnerability scanning, assessment, and remediation using Nessus, eMASS, SonarQube, Checkmarx ensuring compliance with cloud security baselines.
• Provide security engineering support, including secure architecture input, SSO/SSL integration, secure configuration guidance, and API/cloud security reinforcement.
• Collaborate with technical teams, ISSMs, and AO representatives to support audits, inspections, security reviews, and risk mitigation activities.
• Track, report, and respond to cybersecurity incidents, ensuring timely coordination and recovery actions.
• Develop and maintain key cybersecurity documentation, including ISAs, MOAs, SoD matrices, architecture diagrams, and application/database security artifacts.
• Monitor project progress and deliver clear, actionable cybersecurity reports and risk insights to leadership and government stakeholders.
• Communicate effectively with internal teams, customers, and stakeholders in a clear, concise, and professional manner.

Education

Bachelor's degree in IT related field

Job description

Concept Plus is seeking a highly capable Cybersecurity Analyst to support a critical software modernization initiative for a DoD-adjacent client. You will lead RMF/ATO processes, manage security artifacts, and ensure compliance with DoD policies in a fast-paced Agile/DevSecOps environment.

The role requires 8+ years as a Cyber Analyst, DoD experience, and strong documentation skills to produce risk insights and security artifacts for leadership and government stakeholders.