Junior Cybersecurity Analyst / Information System Security Officer (ISSO)

NOVA Corporation; Dayton (OH); On-site; USD 50,000 - 80,000; Full time

Job summary

An established industry player seeks a Junior Cybersecurity Analyst to enhance the cybersecurity posture of an Enterprise ERP environment. This role involves supporting compliance with Risk Management Framework processes, implementing security controls, and managing vulnerabilities. The ideal candidate will collaborate with system administrators and cybersecurity leadership, ensuring security is integrated throughout the system lifecycle. This is a fantastic opportunity for those looking to grow in a mission-focused environment that values innovation and community empowerment.

Qualifications

• Active DoD Secret clearance required.
• Must be 8570 IAT Level II compliant.

Responsibilities

• Assist in maintaining the Authority to Operate (ATO) and RMF processes.
• Support system hardening efforts using DISA STIGs across various platforms.

Skills

CompTIA Security+ CE

DISA STIGs

Risk Management Framework (RMF)

NIST SP 800-53 controls

Attention to detail

Education

Bachelor’s degree in Cybersecurity

Equivalent experience in Information Systems

Tools

ACAS

eMASS

STIG Viewer

Splunk

Job description

Job Summary:

Join our team to support a federal customer within the Department of the Air Force, Lifecycle Management Center. The Junior Cybersecurity Analyst / ISSO will contribute to the cybersecurity posture of an Enterprise ERP environment based on Oracle E-Business Suite (EBS) and its supporting technology stack. This position includes involvement in the development, test, and production environments and will support Risk Management Framework (RMF) compliance, security control implementation, and vulnerability management activities.

Job Duties and Responsibilities:

• Assist in maintaining the Authority to Operate (ATO) and supporting RMF processes aligned with NIST SP 800-37 and AF component policies.
• Support system hardening efforts using DISA STIGs across servers, databases, and applications.
• Monitor and track vulnerabilities using tools such as ACAS and contribute to mitigation and POA&M development.
• Maintain and update system security documentation, including but not limited to, System Security Plans (SSPs), Account Management Policy, Audit Policy and Continuous Monitoring deliverables.
• Collaborate with system administrators, developers, and cybersecurity leadership to ensure security is incorporated throughout the system lifecycle.
• Participate in security audits, patch management processes, and other compliance activities.
• Track and maintain cybersecurity artifacts and evidence to meet customer and AF requirements.
• Other duties asssigned.

Job Requirements (Education/Skills/Experience):

• Active DoD Secret clearance required.
• Must be 8570 IAT Level II compliant (e.g., CompTIA Sec+ CE)
• Familiarity with DISA STIGs, RMF, and NIST SP 800-53 controls.
• Strong attention to detail, ability to quickly learn and follow process documentation

Preferred Qualifications:

• Experience supporting DoD ERP systems.
• Exposure to tools such as eMASS, ACAS, STIG Viewer, Splunk and ESPS.
• Bachelor’s degree in Cybersecurity, Information Systems, or related discipline (or equivalent experience).
• Understanding of Oracle EBS architecture and/or enterprise IT environments is a plus.

Diné Development Corporation (DDC) is a Navajo Nation owned family of companies that delivers IT, professional, and environmental solutions to advance the missions of federal, state, and tribal government agencies. As thought leaders and innovators, our team of specialists build client-centric solutions that solve critical challenges faced by defense, civilian, and healthcare organizations. Employing a mission-focused approach, we deliver value that not only enhances current operations, but also drives future change. Closely aligned with this approach is our commitment to advancing the Navajo Nation and its People. Through economic development and community empowerment, we elevate the Navajo Nation to provide lasting impact and sustainable growth for future generations. DDC’s ability to unite legacy-inspired technologies, industry best practices, and proven methodologies has contributed to our success for twenty years.

This contractor and subcontractor shall abide by the requirements of 41 CFR 60-1.4(a), 60-300.5(a) and 60-741.5(a). These regulations prohibit discrimination against qualified individuals based on their status as protected veterans or individuals with disabilities, and prohibit discrimination against all individuals based on their race, color, religion, sex, sexual orientation, gender identity, national origin, or for inquiring about, discussing, or disclosing information about compensation, or any other basis prohibited by law. We participate in E-Verify.

#dinesourcejobs