DoD RMF Security Analyst — eMASS & Vulnerability

CALIBRE Systems Inc; Washington (Washington County); Hybrid; USD 80,000 - 90,000; Full time

Job summary

CALIBRE Systems, Inc. is seeking a highly qualified Journeyman Information Security Analyst to support a DoD client with enterprise cybersecurity for a large program serving military families.

This hybrid role requires some meetings in Alexandria, VA and involves RMF, vulnerability management, and incident response across DoD cloud and information systems. The candidate will maintain compliance with DoD, DISA, NIST RMF, and related frameworks, support ATOs, and coordinate with ISSM/ISSO teams.

Qualifications

• Master's degree in Information Technology, Cybersecurity, Information Assurance, or related field.
• DoD 8570/8140-aligned certification such as Security+ CE or CySA+ is required.
• 5+ years of cybersecurity, RMF support, or information assurance experience.
• Active Top Secret clearance is required.
• Experience with DoD RMF, eMASS, and compliance tracking is preferred.

Responsibilities

• Support RMF documentation and security control implementation for DoD systems using eMASS.
• Conduct weekly DISA STIG/SRG and ACAS vulnerability assessments and assist with remediation tracking.
• Maintain Plans of Action and Milestones (POA&Ms) and coordinate validation with ISSM/ISSO teams.
• Monitor SIEM and GovCloud logs, track compliance, and escalate abnormal findings.
• Assist with vulnerability assessments and penetration testing for new or modified apps and infrastructure.
• Support incident reporting and coordination with the Incident Response Team.

Skills

Security+ CE

CySA+

DoD 8570/8140-aligned

Active Top Secret clearance

RMF knowledge

Education

Master's degree in IT/Cybersecurity/IA

Bachelor's degree in IT/Cybersecurity/IA

Tools

eMASS

DISA STIGs/SRGs

ACAS

POA&Ms

Job description

CALIBRE Systems, Inc. is seeking a highly qualified Journeyman Information Security Analyst to support a DoD client with enterprise cybersecurity for a large program serving military families.

This hybrid role requires some meetings in Alexandria, VA and involves RMF, vulnerability management, and incident response across DoD cloud and information systems. The candidate will maintain compliance with DoD, DISA, NIST RMF, and related frameworks, support ATOs, and coordinate with ISSM/ISSO teams.