On-Site DoD Cybersecurity Engineer (ISSE/ISSO)

COLSA Corporation; Huntsville (AL); On-site; USD 70,000 - 110,000; Full time

Job summary

COLSA Corporation is seeking multiple Cybersecurity Analysts for a dual-role position in Huntsville, AL. You will design, integrate, and authorize complex DoD information systems, applying ISSE principles and performing ISSO duties to achieve ATO under RMF.

You will translate security policy into actionable engineering requirements, remediate vulnerabilities, and manage artifacts like SSP, SAR, RAR, and SCTM in a fast-paced on-site environment with DoD standards.

Qualifications

• Requires at least an associate degree in cybersecurity or IT.
• U.S. Citizenship required; active DoD Top Secret clearance with SCI eligibility preferred.
• Experience with RMF, NIST 800-53 controls, and DoD security requirements.
• Experience authoring SSP/SAR/RAR/SCTM and security artifacts.
• Ability to translate policy into actionable engineering requirements and remediation plans.

Responsibilities

• Lead the integration of cybersecurity requirements into the SDLC.
• Manage the end-to-end RMF process, including monitoring.
• Author and maintain SSP, SAR, RAR, SCTM.
• Direct remediation via STIGs and IAVA; analyze scan results to mitigate risks.
• Conduct formal risk assessments and manage POA&M.
• Communicate complex cybersecurity topics to non-technical leadership.

Skills

RMF & DoD security

Vulnerability remediation

Leadership comms

ISSE/ISSO duties

Education

Associate degree or higher in Cybersecurity/IT

Active DoD clearance eligibility

Tools

Nessus/ACAS

SCAP Compliance Checker

SCCM & PowerShell

RMF tools

Job description

COLSA Corporation is seeking multiple Cybersecurity Analysts for a dual-role position in Huntsville, AL. You will design, integrate, and authorize complex DoD information systems, applying ISSE principles and performing ISSO duties to achieve ATO under RMF.

You will translate security policy into actionable engineering requirements, remediate vulnerabilities, and manage artifacts like SSP, SAR, RAR, and SCTM in a fast-paced on-site environment with DoD standards.