Hybrid Senior Cybersecurity Analyst — RMF, A&A Lead

GovCIO; US Coast Guard - Operations Systems Center (WV); Hybrid; USD 115,000 - 145,000; Full time

Job summary

GovCIO seeks a Senior Cybersecurity Analyst for the U.S. Coast Guard Software Yard in Kearneysville, WV. The role is hybrid and will serve as the aISSO for assigned systems, enforcing RMF, A&A, and SBOM practices across product teams.

You will embed cybersecurity into modern delivery models, manage vulnerabilities, and coordinate inspections, audits, and incident response within a federal environment.

Qualifications

• DoD 8570 IAT Level II certification required (Security+ CE, CySA+, CCNA Security or equivalent).
• Experience in DoD/Cybersecurity analysis within a federal environment focusing on applications, software assurance, or cloud security.
• Proven ability to analyze and remediate vulnerabilities from automated scans in CI/CD environments.
• Strong RMF, NIST and federal authorization knowledge and experience.
• Experience embedding security requirements into Agile development and rapid release cycles.

Responsibilities

• Lead RMF processes and prepare tailored documentation packages (SSP, CMP, IRP, etc.).
• Support A&A lifecycles and prepare for external inspections and audits.
• Manage POA&Ms from creation to closure and coordinate remediation activities.
• Interpret designs to identify data interconnections and security boundaries; produce ISA/MOU/SLA packages.
• Maintain Change Control processes and conduct Security Impact Assessments.
• Perform vulnerability testing using DISA tools and conduct security readiness reviews.
• Coordinate incident response actions and monitor HBSS compliance and rogue devices.
• Review logs and threat vectors; provide weekly status reports to Government stakeholders.
• Oversee annual contingency and disaster recovery testing and documentation.

Skills

DoD 8570 IAT Level II

Vulnerability management

RMF & NIST knowledge

Security compliance

Agile security integration

CI/CD security

Security incident response

Education

High School Diploma or equivalent

Tools

Jira

Azure DevOps

Tenable Security Center

ServiceNow

HBSS

Job description

GovCIO seeks a Senior Cybersecurity Analyst for the U.S. Coast Guard Software Yard in Kearneysville, WV. The role is hybrid and will serve as the aISSO for assigned systems, enforcing RMF, A&A, and SBOM practices across product teams.

You will embed cybersecurity into modern delivery models, manage vulnerabilities, and coordinate inspections, audits, and incident response within a federal environment.