Journeyman Cybersecurity Analyst

GovCIO; Alexandria (VA); Hybrid; USD 100,000 - 130,000; Full time

Job summary

GovCIO is actively seeking a Journeyman Cybersecurity Analyst in Alexandria, VA, hybrid role supporting USCG IA/ISSO activities. You will develop RMF artifacts, SSPs, and SARs, coordinate POA&M closures, and monitor enterprise security controls across architectures.

The position requires active DoD 8570 IAT II certification, hands-on RMF experience, and strong stakeholder communication. Clearance (Secret) is required.

Qualifications

• DoD 8570 IAT II certification or higher.
• Hands-on experience drafting IA/ISSO artifacts within the NIST SP 800-37 RMF pipeline.
• Experience tracking vulnerability tickets, POA&M, and remediation schedules.
• Strong communication with technical and non-technical stakeholders for security control implementation.

Responsibilities

• Develop, update, and maintain RMF documentation, SSPs, and SARs.
• Coordinate POA&M items to closure with stakeholders and engineers.
• Monitor vulnerability metrics using automated scanners and CM tools.
• Review Nessus/ACAS scans and DISA STIGs for compliance.
• Draft technical reports and briefings on risk posture for leadership.

Skills

DoD 8570 IAT II

RMF artifacts

Vulnerability remediation

Stakeholder communication

Security controls

Education

High School Diploma

Tools

Nessus

ACAS

eMASS

Archer

Job description

GovCIO is currently hiring a Journeyman Cybersecurity Analyst to support Information Assurance (IA) and Information System Security Officer (ISSO) activities for the U.S. Coast Guard (USCG). This technical role focuses on maintaining cybersecurity posture, managing vulnerability remediation, and developing critical compliance artifacts across enterprise architectures. This position will be located in Alexandria, VA, and will be a hybrid position.

Responsibilities

The Journeyman Cybersecurity Analyst will serve as a key technical contributor for system security compliance and risk management. Core responsibilities include:

• Support IA/ISSO artifacts by developing, updating, and maintaining Risk Management Framework (RMF) documentation, System Security Plans (SSP), and Security Assessment Reports (SAR).
• Coordinate vulnerability tickets through tracking, prioritizing, and managing Plan of Action and Milestones (POA&M) items to closure.
• Engage stakeholders for implementation of security controls, collaborating with system owners and engineers to resolve outstanding security findings.
• Monitor compliance metrics across enterprise systems using automated vulnerability scanners and configuration management tools.
• Assess system vulnerabilities by reviewing Nessus/ACAS scans, STIG checklists, and Security Content Automation Protocol (SCAP) results.
• Facilitate continuous monitoring activities to ensure systems maintain their Authorization to Operate (ATO) status.
• Analyze audit logs and security alerts to identify potential compliance gaps or unauthorized system modifications.
• Draft technical reports and briefings regarding system risk posture for leadership and external authorization authorities.

Qualifications

High School with 6 - 9 years (or commensurate experience)

Required Skills & Experience

• Certifications: DoD 8570 IAT Level II or higher (e.g., Security+ CE, CySA+, or vendor-specific identity certifications).
• Hands-on experience drafting, managing, and maintaining federal IA/ISSO artifacts within the NIST SP 800-37 RMF pipeline.
• Proven track record tracking vulnerability tickets, managing POA&Ms, and driving technical remediation schedules.
• Strong communication skills required to actively engage technical and non-technical stakeholders for security control implementation.

Clearance Required: Must have an active Secret clearance

Preferred Skills & Experience

• Prior experience supporting U.S. Coast Guard (USCG) or Department of Homeland Security (DHS) identity management programs.
• Familiarity with enterprise tools such as Enterprise Mission Assurance Support Service (eMASS) or Archer.
• Direct experience interpreting ACAS/Nessus vulnerability scans and applying DISA STIGs..

Posted Salary Range

USD $100,000.00 - USD $130,000.00 /Yr.