DoD Information Security Analyst - RMF Mid Level

Akhiok-Kaguyak, Inc.; Colorado Springs (CO); On-site; USD 105,000 - 120,000; Full time

Benefits offered by this job

Competitive compensation

Comprehensive benefits

Opportunities for professional growth

Collaborative environment

Job summary

Sugpiat Defense is seeking an experienced Information Security Analyst- Mid Level to support the Missile Defense Agency (MDA) in Colorado Springs, Colorado.

The selected candidate will assist in protecting mission-critical information systems by implementing cybersecurity policies, supporting Risk Management Framework (RMF) activities, monitoring system security posture, and ensuring compliance with Department of Defense (DoD) cybersecurity requirements.

Qualifications

• Bachelor's degree in Cybersecurity or related field.
• 3–5 years of information assurance or cybersecurity experience, preferably DoD.
• Experience with RMF.
• Familiarity with Windows/Linux, Active Directory, and networking.

Responsibilities

• Support RMF activities throughout the system lifecycle.
• Maintain RMF artifacts such as SSPs and SARs.
• Perform continuous monitoring to ensure DoD compliance.
• Review vulnerability findings and coordinate remediation.
• Assist with ATO processes and security assessments.
• Collaborate with ISSMs, engineers, and government personnel.
• Prepare reports and status updates on compliance and risk.

Skills

Cybersecurity

RMF

Analytical thinking

Communication

Independent work

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or a related field

Tools

NIST SP 800-53

NIST SP 800-37

DoD RMF

DISA STIGs

eMASS

Job description

Sugpiat Defense is seeking an experienced Information Security Analyst- Mid Level to support the Missile Defense Agency (MDA) in Colorado Springs, Colorado.

The selected candidate will assist in protecting mission-critical information systems by implementing cybersecurity policies, supporting Risk Management Framework (RMF) activities, monitoring system security posture, and ensuring compliance with Department of Defense (DoD) cybersecurity requirements.