Federal Information Security Analyst – RMF/NIST Expert

SkyePoint Decisions, Inc.; Newington (VA); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Certification incentive program

PTO

Floating federal holidays

Health insurance options

401k matched

Job summary

SkyePoint Decisions seeks an Information Security Analyst to support a Department of State cybersecurity program in a hybrid Virginia location. The role includes implementing security controls, RMF activities, risk analyses, and ongoing monitoring across classified and unclassified environments.

The candidate will develop security documentation, coordinate remediation, and ensure FedRAMP, FISMA, and DoS compliance while participating in incident response and audits.

Qualifications

• Minimum 5 years of cybersecurity or information security experience supporting federal government, intelligence community, or DoD environments.
• Active TS/SCI clearance.
• Bachelor's degree in a related field or equivalent experience.
• Current CompTIA Security+ or DoD 8570/8140 IAT Level II certification.
• Experience with NIST SP 800-53, RMF, security control assessments, vulnerability management, continuous monitoring, FedRAMP, and security authorization processes.
• Experience preparing and managing compliance and security documentation.
• Strong analytical, problem-solving, and communication skills.
• Must be a U.S. Citizen.

Responsibilities

• Support the implementation and monitoring of cybersecurity controls per NIST SP 800-53, DOS policies, and federal requirements.
• Assist RMF activities including security control implementation, assessment, authorization, and continuous monitoring.
• Conduct security assessments, compliance reviews, and risk analyses for information systems and applications.
• Monitor system security posture, identify vulnerabilities, threats, and compliance gaps.
• Develop and maintain cybersecurity documentation.
• Support security control lifecycle management from implementation through remediation.
• Analyze vulnerability scans and coordinate remediation with admins and engineering teams.
• Ensure compliance with FedRAMP, FISMA, and Department of State requirements.
• Participate in incident response, investigations, and forensics as required.
• Generate security metrics, status reports, and dashboards for management.
• Support audits, inspections, and authorization activities.
• Research emerging threats and propose security improvements.

Skills

5+ years cybersecurity experience

TS/SCI clearance

Bachelor's degree in Cybersecurity/IT/

CompTIA Security+/DoD 8570/8140 IAT II

NIST SP 800-53

RMF

FedRAMP

Vulnerability management

Education

Bachelor's degree in Cybersecurity, IT, CS, IS

Tools

SIEM software

Vulnerability management tools

Security monitoring platforms

Job description

SkyePoint Decisions seeks an Information Security Analyst to support a Department of State cybersecurity program in a hybrid Virginia location. The role includes implementing security controls, RMF activities, risk analyses, and ongoing monitoring across classified and unclassified environments.

The candidate will develop security documentation, coordinate remediation, and ensure FedRAMP, FISMA, and DoS compliance while participating in incident response and audits.