DoD Cybersecurity Analyst - RMF/ISSO Lead (On-Site)

Colsa; Huntsville (AL); On-site; USD 110,000 - 140,000; Full time

Job summary

COLSA Corporation in Huntsville, AL, seeks multiple Cybersecurity Analysts for a dual‑role position responsible for design, integration, and formal authorization of DoD information systems under RMF. You will apply ISSE principles and perform ISSO duties to ensure ATO readiness.

You will manage vulnerability remediation with ACAS/Nessus, develop security artifacts (SSP/SAR/SCTM), and support RMF lifecycle while working on-site at MSIC.

Qualifications

• Active DoD Top Secret clearance with SCI eligibility and ability to obtain CI Polygraph within 180 days of hire.
• U.S. Citizenship is required and candidates must meet SAP eligibility.
• Active Security+ CE or ISC2 SSCP (or equivalent) baseline certification and deep knowledge of NIST 800-53 controls.

Responsibilities

• Lead the design and integration of cybersecurity requirements into the SDLC.
• Manage end‑to‑end RMF process including categorization, control selection, implementation, and continuous monitoring.
• Author and maintain SSP, SAR, RAR, and SCTM as part of the Security Authorization Package.
• Direct remediation using STIGs and IAVA; analyze vulnerability scans to develop mitigations.
• Conduct formal risk assessments and manage POA&Ms to closure.

Skills

CompTIA Security+ CE

ISSE concepts

NIST 800-53

RMF Lifecycle

Vulnerability remediation

SSP/SAR/SCTM

Communication to leadership

DoD clearance basics

Education

Associate’s degree in Cybersecurity or related field

Tools

ACAS (Nessus)

SCCM/WMI/PowerShell

SCAP Compliance Checker (SCC)

Job description

COLSA Corporation in Huntsville, AL, seeks multiple Cybersecurity Analysts for a dual‑role position responsible for design, integration, and formal authorization of DoD information systems under RMF. You will apply ISSE principles and perform ISSO duties to ensure ATO readiness.

You will manage vulnerability remediation with ACAS/Nessus, develop security artifacts (SSP/SAR/SCTM), and support RMF lifecycle while working on-site at MSIC.