Junior Cybersecurity Analyst - DAFFM

Chameleon Integrated Services; South Dakota; On-site; USD 55,000 - 75,000; Full time

Benefits offered by this job

Health Insurance

Vision Plan

401K

Life Insurance

Disability Insurance

Training allowance

PTO

Job summary

Chameleon Integrated Services in the United States is seeking a Junior Cybersecurity Analyst to support cybersecurity analysis, RMF artifact maintenance, vulnerability tracking, and portfolio reporting under senior leadership.

You will maintain records, update eMASS and ITIPS, track POA&M milestones, and compile monthly vulnerability reports, while coordinating with system owners, program offices, and engineers.

Qualifications

• Hands-on RMF documentation or continuous-monitoring support.
• Use of eMASS, ITIPS, or both; identify exact level of access and duties.
• POA&M, vulnerability, control-assessment, or artifact-maintenance work.
• Data reconciliation and reporting across multiple systems or organizational units.

Responsibilities

• Maintain assigned cybersecurity records and supporting evidence.
• Update eMASS and ITIPS entries under established review controls.
• Track vulnerabilities, POA&M milestones, remediation status, due dates, and closure evidence.
• Compile data for monthly POA&M status and enterprise vulnerability reports.
• Maintain system inventory, boundary, contact, authorization-status, and ATO-expiration data.
• Assist with security-control assessment documentation.
• Draft assigned portions of SSPs, RARs, POA&Ms, decision packages, briefings, policies, SOPs, templates, and checklists.
• Reconcile technical findings against authoritative records.
• Coordinate status with system owners, program offices, administrators, and engineers.
• Escalate inconsistent, overdue, high-risk, or unsupported records for senior review.

Skills

RMF documentation

Vulnerability tracking

POA&M coordination

Data reconciliation

Education

Bachelor's degree in Cybersecurity

Bachelor's or Master's in Information Assurance

Tools

eMASS

ITIPS

Job description

We are a growing information technology company that offers its employees a culture of success, the chance to work on revolutionary federal IT infrastructure, and the opportunity to grow alongside cutting-edge technology that is reshaping the industry. We are seeking forward thinking candidates that have strong experience in operational support and can help take to the next level in a pro‑active stance.

Chameleon Integrated Services has expertise in operations management, quality systems, data operations and cybersecurity. We secure some of the most sensitive data for the Department of Defense and for other U. S. federal government agencies. We are known for the great care we take with clients and employees, and we believe in promoting from within.

We offer a Full Benefits package including:

• Competitive Employee Health Insurance options including dental
• 100% company paid vision plan
• 401K plan with generous company match and no vesting period
• 100% company paid Life insurance
• 100% company paid long and short-term disability insurance
• Training allowance
• PTO and more

JUNIOR CYBERSECURITY ANALYST

Position mission:

Support cybersecurity analysis, RMF artifact maintenance, vulnerability tracking, and portfolio reporting under senior cybersecurity leadership.

Duties

• Maintain assigned cybersecurity records and supporting evidence.
• Update eMASS and ITIPS entries under established review controls.
• Track vulnerabilities, POA&M milestones, remediation status, due dates, and closure evidence.
• Compile data for monthly POA&M status and enterprise vulnerability reports.
• Maintain system inventory, boundary, contact, authorization-status, and ATO-expiration data.
• Assist with security-control assessment documentation.
• Draft assigned portions of SSPs, RARs, POA&Ms, decision packages, briefings, policies, SOPs, templates, and checklists.
• Reconcile technical findings against authoritative records.
• Coordinate status with system owners, program offices, administrators, and engineers.
• Escalate inconsistent, overdue, high-risk, or unsupported records for senior review.

MANDATORY SECURITY COMPLIANCE (DoD 8570 / DoD 8140)

To be eligible for technical review and corporate submittal to the Air Force Contracting Officer, candidates MUST meet the requirements of OPTION A or OPTION B below. Applications failing to demonstrate at least one pathway will be automatically archived.

• OPTION A (8570):
  • CGRC - Certified in Governance, Risk and Compliance (formerly CAP)
  • CASP+ CE - CompTIA Advanced Security Practitioner
  • CISM - Certified Information Security Manager
  • CISSP (or Associate) - Certified Information Systems Security Professional
  • GSLC - GIAC Security Leadership Certification
  • CCISO - Certified Chief Information Security Officer
• OPTION B (8140):

  Candidate must hold a relevant higher-education degree (Master's or Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or Information Technology) AND demonstrate clear, hands-on professional experience supporting Risk Management Framework (RMF) activities, updating control implementation records, or maintaining vulnerability tracking logs within structured environments.

Requirements

• Hands-on RMF documentation or continuous-monitoring support.
• Use of eMASS, ITIPS, or both; identify exact level of access and duties.
• POA&M, vulnerability, control-assessment, or artifact-maintenance work.
• Data reconciliation and reporting across multiple systems or organizational units.

Anticipated start: September 28, 2026

Primary work location: Ellsworth AFB, South Dakota. Occasional work at Wright-Patterson AFB, Ohio.

Work schedule: An eight-hour shift scheduled between 6:00 a.m. and 6:00 p.m. Mountain Time, Monday through Friday. The team must collectively provide overlapping coverage during that window. COOP support may be required, but work will remain within a 40-hour workweek unless the Contracting Officer authorizes otherwise.

Project Length: Up to 4.5 years

"We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status"

Texting Privacy Policy

• Message type: Informational; you will receive text messages regarding your application and potentially regarding interview scheduling.
• No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.
• Message frequency will vary depending on the application process. Msg & data rates may apply.
• OPT out at any time by texting "Stop".