ISSO Cybersecurity Analyst - RMF, IAM & Splunk Expert

Serco; Orlando (FL); On-site; USD 100,000 - 140,000; Full time

Job summary

Serco Inc. in Orlando is seeking a Cybersecurity Analyst - ISSO to support the DMON program, performing hands-on monitoring, vulnerability management, and RMF A&A activities for enterprise identities and systems.

This role requires an active DoD Top-Secret clearance, a BS in Computer Science or related field, DoD 8570 IAT Level II/III, and experience with NIST SP 800-53, STIGs, CIS benchmarks, and security documentation. Travel up to 10% may be required.

Qualifications

• Active DoD Top-Secret clearance is required at time of hire.
• Bachelor's degree in Computer Science or related field with 5+ years of information systems administration or cybersecurity experience.
• DoD 8570 IAT Level II or III certification (Security+, CySA+, CISSP, or equivalent)
• Working knowledge of NIST SP 800-53, RMF, and A&A processes.
• Familiarity with STIGs, CIS benchmarks, and secure configuration management.
• Strong written communication skills for security documentation (SSPs, POA&Ms, risk assessments).
• Travel up to 10%.

Responsibilities

• Review and validate system compliance with DISA STIGs, identifying gaps and recommending corrective actions.
• Oversee vulnerability and patch management activities including ACAS scans, system alerts, and patch mitigations.
• Monitor and analyze security events and logs using Splunk, identifying anomalies and potential threats.
• Conduct security control implementation and testing for identity systems in support of RMF A&A packages.
• Support vulnerability remediation, patch management, and secure configuration baselines (STIGs/CIS benchmarks) for IAM infrastructure.
• Partner with application owners and engineering teams to embed zero trust and least-privilege principles into identity workflows.
• Serve as the ISSO of record for identity management systems, maintaining continuous ATO status.
• Conduct and document risk assessments, POA&Ms, and continuous monitoring activities for assigned systems.
• Coordinate with the ISSM, AO, and assessment teams during A&A activities, audits, and inspections (NIST SP 800-53, RMF, FedRAMP as applicable).
• Monitor and report on security events, incidents, and access anomalies related to identity and access systems; support incident response as needed.
• Maintain audit-ready documentation for access reviews, certification campaigns, and compliance evidence collection.
• Ensure identity-related controls align with applicable frameworks (NIST 800-53, NIST 800-63, ICD 503, DoD RMF, or agency-specific requirements).
• Brief leadership and stakeholders on identity security posture, risk, and remediation status.

Skills

Active DoD Top-Secret clearance

Bachelor's degree in Computer Science

5 years information systems / cyber‑se

Education

Bachelor's degree in Computer Science or related field

Tools

Splunk

ACAS

JIRA

Job description

Serco Inc. in Orlando is seeking a Cybersecurity Analyst - ISSO to support the DMON program, performing hands-on monitoring, vulnerability management, and RMF A&A activities for enterprise identities and systems.

This role requires an active DoD Top-Secret clearance, a BS in Computer Science or related field, DoD 8570 IAT Level II/III, and experience with NIST SP 800-53, STIGs, CIS benchmarks, and security documentation. Travel up to 10% may be required.