ISSO & RMF Cybersecurity Analyst - Risk & Compliance

VMD Corp; United States; On-site; USD 110,000 - 150,000; Full time

Job summary

Xcelerate Solutions is seeking an Information System Security Officer (ISSO)/RMF Cybersecurity Analyst to guide federal systems through RMF to obtain and maintain ATO. You will coordinate vulnerability management, security control assessments, and continuous monitoring, collaborating with system admins and authorizing officials across the GovCon landscape.

Strong RMF expertise, NIST SP knowledge, and hands-on use of eMASS are required, along with excellent technical writing and communication

Qualifications

• Bachelor’s degree in Cybersecurity, Information Assurance, Computer Science, Information Technology, or related field.
• Minimum 5+ years in cybersecurity/IT compliance.
• 3+ years guiding RMF through steps 1–7 to ATO determinations.
• Deep knowledge of NIST SP 800-37/800-53 and CNSSI 1253.
• Experience with automated vulnerability tools (Nessus, ACAS, SCC).
• Experience using eMASS and security control databases.

Responsibilities

• Lead RMF lifecycle activities for authorization and continuous monitoring.
• Develop and maintain SSPs, SARs, POA&Ms, and continuous monitoring plans.
• Use eMASS to document and track compliance packages.
• Coordinate vulnerability scans and remediation with technical teams.
• Review DISA STIGs/SRGs for secure configurations.
• Support incident response and log management per federal guidelines.
• Advise development and operations teams on security-by-design practices.

Skills

RMF lifecycle expertise

Vulnerability management

Security controls management

Federal cybersecurity policy knowledge

Technical writing

Communication skills

Education

Bachelor’s degree in Cybersecurity/IA/CS/IT or related field

Tools

eMASS

Nessus

ACAS

SCC

STIGs/SRGs

Job description

Xcelerate Solutions is seeking an Information System Security Officer (ISSO)/RMF Cybersecurity Analyst to guide federal systems through RMF to obtain and maintain ATO. You will coordinate vulnerability management, security control assessments, and continuous monitoring, collaborating with system admins and authorizing officials across the GovCon landscape.

Strong RMF expertise, NIST SP knowledge, and hands-on use of eMASS are required, along with excellent technical writing and communication