On-Site Information Security Analyst - RMF, ACAS & DoD

Techead; Ozark, Northern (AL, KY); Hybrid; USD 60,000 - 70,000; Full time

Job summary

TECHEAD is seeking an Information Security Analyst to join our Fort Rucker team on-site. The role focuses on implementing and operating the ACAS vulnerability management suite, aligning with RMF and NIST standards, and collaborating with IT and engineering to remediate findings.

You will maintain security documentation, prepare for audits, and participate in incident response with guidance on best practices. Requires DoD IAT II and Security+ CE on day one, plus CySA+ within 90 days.

Qualifications

• 4+ years of dedicated cybersecurity experience or equivalent technical field.
• Active Secret security clearance.
• Active DoD IAT Level II certification required (Security+ CE) on day one.
• CompTIA CySA+ must be obtained within 90 days of hire.
• Technical experience with automated scanning and security compliance tools (ACAS, CIS Benchmarks, SCAP, Retina).

Responsibilities

• Implement and manage the ACAS suite to conduct routine vulnerability scans across network infrastructure.
• Analyze scan findings, prioritize vulnerabilities based on threat impact, and drive remediation with IT and development teams.
• Prepare RMF artifacts, SSPs, and manage POA&M for audit readiness.
• Ensure system compliance with NIST and DoD cybersecurity standards; support internal and external audits.
• Participate in incident response and provide security guidance and awareness.

Skills

Cybersecurity experience

Security clearance

RMF familiarity

Tools

ACAS

CIS Benchmarks

SCAP

Retina

Job description

TECHEAD is seeking an Information Security Analyst to join our Fort Rucker team on-site. The role focuses on implementing and operating the ACAS vulnerability management suite, aligning with RMF and NIST standards, and collaborating with IT and engineering to remediate findings.

You will maintain security documentation, prepare for audits, and participate in incident response with guidance on best practices. Requires DoD IAT II and Security+ CE on day one, plus CySA+ within 90 days.