Junior Cybersecurity Analyst / Information System Security Officer (ISSO)

NOVA-Diné; Dayton (OH); On-site; USD 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a Junior Cybersecurity Analyst to enhance the cybersecurity posture of a federal client's ERP environment. This role involves supporting RMF compliance, system hardening, and vulnerability management. The ideal candidate will have a strong background in cybersecurity principles, familiarity with DoD ERP systems, and a proactive approach to security documentation and audits. Join a dynamic team dedicated to ensuring the integrity and security of critical systems while working in a collaborative environment that values growth and innovation.

Qualifications

• 3+ years of experience in cybersecurity or related field.
• 8570 IAT Level II compliant, e.g., CompTIA Security+ CE.

Responsibilities

• Assist in maintaining ATO and supporting RMF processes.
• Monitor vulnerabilities and contribute to mitigation efforts.

Skills

Cybersecurity

Risk Management Framework (RMF)

NIST SP 800-53

Attention to Detail

Vulnerability Management

Education

Bachelor’s degree in Cybersecurity

CompTIA Security+ CE

Tools

ACAS

eMASS

STIG Viewer

Splunk

Job description

Job Summary

Join our team to support a federal customer within the Department of the Air Force, Lifecycle Management Center. The Junior Cybersecurity Analyst / ISSO will contribute to the cybersecurity posture of an Enterprise ERP environment based on Oracle E-Business Suite (EBS) and its supporting technology stack. This position involves development, testing, and production environments, supporting RMF compliance, security control implementation, and vulnerability management activities.

Job Duties and Responsibilities

1. Assist in maintaining the Authority to Operate (ATO) and supporting RMF processes aligned with NIST SP 800-37 and AF policies.
2. Support system hardening efforts using DISA STIGs across servers, databases, and applications.
3. Monitor and track vulnerabilities using tools such as ACAS and contribute to mitigation and POA&M development.
4. Maintain and update system security documentation, including SSPs, Account Management Policy, Audit Policy, and Continuous Monitoring deliverables.
5. Collaborate with system administrators, developers, and cybersecurity leadership to incorporate security throughout the system lifecycle.
6. Participate in security audits, patch management, and compliance activities.
7. Track and maintain cybersecurity artifacts and evidence to meet customer and AF requirements.
8. Other duties as assigned.

Job Requirements (Education/Skills/Experience)

1. Active DoD Secret clearance required.
2. Must be 8570 IAT Level II compliant (e.g., CompTIA Sec+ CE).
3. Minimum three (3) years of experience required.
4. Familiarity with DISA STIGs, RMF, and NIST SP 800-53 controls.
5. Strong attention to detail and ability to quickly learn and follow process documentation.

Preferred Qualifications

1. Experience supporting DoD ERP systems.
2. Exposure to tools such as eMASS, ACAS, STIG Viewer, Splunk, and ESPS.
3. Bachelor’s degree in Cybersecurity, Information Systems, or related discipline (or equivalent experience).
4. Understanding of Oracle EBS architecture and/or enterprise IT environments is a plus.