Hybrid Cybersecurity Analyst - RMF/ATO & Vulnerability

GovCIO; Alexandria (VA); Hybrid; USD 100,000 - 130,000; Full time

Job summary

GovCIO is actively seeking a Journeyman Cybersecurity Analyst in Alexandria, VA, hybrid role supporting USCG IA/ISSO activities. You will develop RMF artifacts, SSPs, and SARs, coordinate POA&M closures, and monitor enterprise security controls across architectures.

The position requires active DoD 8570 IAT II certification, hands-on RMF experience, and strong stakeholder communication. Clearance (Secret) is required.

Qualifications

• DoD 8570 IAT II certification or higher.
• Hands-on experience drafting IA/ISSO artifacts within the NIST SP 800-37 RMF pipeline.
• Experience tracking vulnerability tickets, POA&M, and remediation schedules.
• Strong communication with technical and non-technical stakeholders for security control implementation.

Responsibilities

• Develop, update, and maintain RMF documentation, SSPs, and SARs.
• Coordinate POA&M items to closure with stakeholders and engineers.
• Monitor vulnerability metrics using automated scanners and CM tools.
• Review Nessus/ACAS scans and DISA STIGs for compliance.
• Draft technical reports and briefings on risk posture for leadership.

Skills

DoD 8570 IAT II

RMF artifacts

Vulnerability remediation

Stakeholder communication

Security controls

Education

High School Diploma

Tools

Nessus

ACAS

eMASS

Archer

Job description

GovCIO is actively seeking a Journeyman Cybersecurity Analyst in Alexandria, VA, hybrid role supporting USCG IA/ISSO activities. You will develop RMF artifacts, SSPs, and SARs, coordinate POA&M closures, and monitor enterprise security controls across architectures.

The position requires active DoD 8570 IAT II certification, hands-on RMF experience, and strong stakeholder communication. Clearance (Secret) is required.