InfoSec Analyst – RMF/NIST Expert for Federal Programs

SkyePoint Decisions; Springfield (VA); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Certification incentive program

PTO

HSA/FSAs and insurance options

Job summary

SkyePoint Decisions, a leading cybersecurity provider, seeks an Information Security Analyst to support a Department of State program. The role focuses on implementing security controls, RMF processes, and risk management across classified and unclassified environments.

Hybrid work is allowed as the location remains to be determined. The candidate will work with government stakeholders and technical teams to monitor compliance, perform assessments, and sustain continuous monitoring in accordance

Qualifications

• Minimum 5 years of cybersecurity or information security experience supporting federal environments.
• Active TS/SCI Clearance.
• Bachelor's degree in a related field or equivalent combination of education and experience.
• Current CompTIA Security+ or DoD 8570/8140 IAT Level II certification.
• Experience with NIST SP 800-53, Security Control Assessments, Vulnerability Management, FedRAMP, and Security Authorization.

Responsibilities

• Support implementation and monitoring of cybersecurity controls per NIST SP 800-53 and federal requirements.
• Assist RMF activities including control implementation, assessment, authorization, and continuous monitoring.
• Conduct security assessments, compliance reviews and risk analyses for information systems and applications.
• Monitor system security posture and coordinate remediation of vulnerabilities.
• Develop and maintain cybersecurity documentation.
• Support security control lifecycle management from implementation through ongoing assessment and remediation.
• Analyze vulnerability scans and coordinate remediation with admins and engineering teams.
• Ensure compliance with FedRAMP, FISMA and Department of State cybersecurity requirements.
• Participate in incident response activities, investigations, and forensic support as required.
• Generate security metrics, status reports, and compliance dashboards for management review.
• Support internal and external audits, inspections and authorization activities.
• Research emerging threats and recommend improvements to enhance security posture.

Skills

Security controls

Risk assessment

Vulnerability management

RMF

Communication skills

Team collaboration

Education

Bachelor's degree in Cybersecurity, IT, CS, IS, or related field

Tools

NIST SP 800-53

FedRAMP

Security Control Assessments

RMF processes

SIEM

Vulnerability scanners

Job description

SkyePoint Decisions, a leading cybersecurity provider, seeks an Information Security Analyst to support a Department of State program. The role focuses on implementing security controls, RMF processes, and risk management across classified and unclassified environments.

Hybrid work is allowed as the location remains to be determined. The candidate will work with government stakeholders and technical teams to monitor compliance, perform assessments, and sustain continuous monitoring in accordance