DoD Cybersecurity Analyst — RMF & IAVM (TS/SCI)

RedSky; Tampa (FL); On-site; USD 110,000 - 150,000; Full time

Job summary

RedSky seeks a Cybersecurity Analyst/Information Assurance professional to support DoD missions in a knowledge management focused environment. The role requires maintaining TS/SCI readiness with a Secret/TS posture across RMF, STIGs, and continuous monitoring.

You will bridge enterprise knowledge management with DoD security controls and drive CCRI readiness and IAVM compliance. Responsibilities include leading searches for STIG gaps, supporting ATO activities, and producing security status

Qualifications

• Active Secret/TS clearance.
• 5+ years supporting RMF in a DoD environment.
• 3+ years supporting full ATO lifecycle.
• 3+ years applying STIGs across the stack (M365, Windows, SQL, Azure, AD, IIS, .NET, custom apps).
• 3+ years identifying STIG findings and remediation.
• 3+ years CCRI readiness and internal audits.
• 3+ years CCRI remediation tracking.
• 3+ years IAVM directive tracking and compliance.
• 2+ years SSPs for enterprise systems with DoD format.
• 2+ years producing security status reports and risk summaries.

Responsibilities

• Bridge between technical team and government security authorization framework.
• Ensure systems operate within approved security boundaries and maintain DoD compliance.
• Prepare for and support CCRI readiness reviews and findings.
• Produce CCRI remediation progress and IAVM compliance reports.
• Maintain SSPs and executive risk summaries.

Skills

RMF/NIST SP 800-37

STIGs

CCRIs and audits

IAVM compliance

Threat monitoring

Education

CompTIA Security+

CySA+

GICSP

GSEC

SSCP

Tools

Microsoft Defender for Office 365

Microsoft Defender for Endpoint

Defender for Cloud Apps

Microsoft Sentinel

Job description

RedSky seeks a Cybersecurity Analyst/Information Assurance professional to support DoD missions in a knowledge management focused environment. The role requires maintaining TS/SCI readiness with a Secret/TS posture across RMF, STIGs, and continuous monitoring.

You will bridge enterprise knowledge management with DoD security controls and drive CCRI readiness and IAVM compliance. Responsibilities include leading searches for STIG gaps, supporting ATO activities, and producing security status