DoD RMF Security Analyst - Vulnerability & Compliance

Jobtailor; Tampa (FL); On-site; USD 90,000 - 130,000; Full time

Job summary

Jobtailor in Tampa, FL is seeking an experienced information security professional to support DoD RMF processes, vulnerability management, and compliance activities within a federal environment. You will perform STIG assessments, develop POA&Ms, contribute to eMASS ATO packages, and assist with cyber incident response while maintaining essential security documentation and workforce qualification records.

Strong knowledge of NIST SP 800-53, RMF, and ACAS/SCC/SCAP tooling is required; U.S.

Qualifications

• 3–5 years of information security experience in a federal or DoD environment.
• Working knowledge of NIST SP 800-53, RMF, and STIG compliance requirements.
• Hands-on experience with ACAS, SCC/SCAP, or similar vulnerability scanning tools.
• Bachelor's degree in a relevant field or DoD 8570/8140 certification.

Responsibilities

• Perform vulnerability scanning, STIG assessments, and security compliance monitoring.
• Develop and manage POA&Ms for identified vulnerabilities in compliance with DoD timelines.
• Support RMF documentation and ATO package development in eMASS
• Assist with cyber incident identification, reporting, and response activities
• Support external security assessments, audits, and penetration tests
• Maintain security compliance documentation and cybersecurity workforce qualification records
• Assist with Privacy Impact Assessments and information protection compliance monitoring

Skills

Vulnerability Scanning

RMF

NIST SP 800-53 Compliance

Security Clearance T3

DoD 8570/8140 IA BaselineCertification

Education

Bachelor's Degree in a relevant field

DoD 8570/8140 IA Baseline Certification

Tools

ACAS

SCC/SCAP

EMASS

Job description

Jobtailor in Tampa, FL is seeking an experienced information security professional to support DoD RMF processes, vulnerability management, and compliance activities within a federal environment. You will perform STIG assessments, develop POA&Ms, contribute to eMASS ATO packages, and assist with cyber incident response while maintaining essential security documentation and workforce qualification records.

Strong knowledge of NIST SP 800-53, RMF, and ACAS/SCC/SCAP tooling is required; U.S.