Onsite Federal IT Security Analyst | RMF/ATO Expert

Lynker; Mississippi; Hybrid; USD 105,000 - 145,000; Full time

Benefits offered by this job

Healthcare for employee and family

401(k) retirement plan with company-m"

ESOP – employee ownership

Tuition assistance/Training

Spot bonuses

PTO and holidays

Job summary

Lynker is seeking a skilled IT Security Analyst to safeguard critical federal infrastructure at the National Data Buoy Center (NDBC). You will work with the ISSO and contractor staff onsite at the Stennis facility to maintain ATO readiness and ensure compliance with federal cybersecurity standards while supporting mission requirements.

The role emphasizes RMF, NIST 800-53 controls, vulnerability management, and clear communication of risk to stakeholders.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent.
• Security+ certification minimum; CISSP preferred.
• 5+ years of cybersecurity experience focused on federal IA and RMF.
• Experience with NOAA/DOC/OIG audits and complex audit cycles.
• Strong knowledge of NIST SP 800-53 controls and RMF steps.
• Ability to translate security controls into actionable requirements.

Responsibilities

• Maintain RMF artifacts (SSPs, RARs, POA&Ms) with ISSO support.
• Lead audits and A&A processes; document evidence and drive remediation.
• Perform vulnerability scans and guide hardening per DISA STIGs/CIS Benchmarks.
• Conduct Security Impact Analyses for system changes and assess risk.
• Monitor logs and identify threats across hybrid infrastructure.
• Communicate risk to stakeholders; keep documentation up to date.

Skills

RMF expertise

NIST SP 800-53

A&A process

Windows & Linux security

Tenable Nessus

SIEM experience

Audit coordination

Communication

Cloud security (AWS/Azure)

Public Trust readiness

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Nessus

ACAS

SIEM platforms

DISA STIGs

CIS Benchmarks

Job description

Overview

Lynker Corporation is seeking a high-performing IT Security Analyst to safeguard mission-critical infrastructure for the National Data Buoy Center (NDBC). Working directly with the federal Information System Security Officer (ISSO) and contractor technical staff, you will ensure NDBC systems maintain a robust security posture, maintain continuous Authority to Operate (ATO), and adhere to federal cybersecurity standards while supporting operational mission requirements. The ideal IT Security Analyst selected will be able to work onsite at the Stennis facility.

Responsibilities

Duties of the IT Security Analyst will include the following:

- Support the ISSO in maintaining all Risk Management Framework (RMF) artifacts, including System Security Plans (SSPs), Risk Assessment Reports (RARs), and Plans of Action and Milestones (POA&Ms).

- Lead technical teams through internal and external security audits (e.g., DOC, GAO, OIG) and the annual Assessment and Authorization (A&A) process. Gather evidence, document audit paths, and drive remediation actions to ensure continuous ATO.

- Execute routine vulnerability scans using enterprise tools (e.g., Tenable Nessus/ACAS) and guide technical teams in hardening operating systems, databases, and network devices according to DISA STIGs and CIS Benchmarks.

- Perform Security Impact Analyses (SIA) for proposed hardware, software, and configuration changes to evaluate risk and ensure compliance with NIST SP 800-53 controls.

- Monitor system logs to identify, isolate, and mitigate potential threats across hybrid infrastructure.

- Translate complex security controls into actionable requirements for IT personnel, while effectively communicating risk and compliance status to non-technical stakeholders and leadership.

- Ensure related documentation is kept current.

Qualifications

The IT Security Analyst selected should have the following:

Education Requirements: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or equivalent.

Certificate Requirements: Minimum of Security+ certification; CISSP certification is preferred.

- 5+ years of progressive experience in cybersecurity, with a heavy focus on federal Information Assurance (IA) and the Risk Management Framework (RMF).

- Proven track record working within federal agency guidelines (e.g., NOAA, DOC, GAO, OIG) and navigating complex internal/external audit cycles.

- Deep, practical understanding of NIST SP 800-53 (Revision 4/5) security controls and the 7-step RMF process.

- Demonstrated ability to author and defend highly technical artifacts, including System Security Plans (SSPs), Risk Assessment Reports (RARs), and Plan of Action and Milestones (POA&Ms).

- Proficiency in translating DISA STIGs and CIS Benchmarks into actionable technical requirements for operating systems, databases, and network devices.

- Advanced experience operating and analyzing data from enterprise scanning tools, specifically Tenable Nessus, SecurityCenter, or ACAS.

- Experience navigating SIEM platforms and security dashboards to monitor system logs, correlate events, and isolate anomalies.

- Ability to conduct technical Security Impact Analyses (SIA) to determine how proposed system, hardware, or software changes will affect the overall security baseline.

- Strong technical background and able to liaison between technical IT personnel and stakeholders.

- Extensive knowledge of implementing security controls on Windows and Linux systems, both onsite and in a cloud environment (Amazon Web Services (AWS) and Microsoft Azure environments).

- Excellent communication skills with an ability to translate technical concepts for diverse stakeholders.

- Well organized, with an attention to detail.

Other:

- Must be able to successfully complete a NOAA (Stennis Space Center)/NASA background investigation for site/system access.

- Must be able to obtain and maintain facility credentials/authorization. Must be able to obtain and maintain a Public Trust clearance. Note: US Citizenship or a valid Green Card is required for facility credentials/authorization at this work location.

About Lynker

Lynker is a growing, employee owned business, specializing in professional, scientific and technical services. Our continually expanding team combines scientific expertise with mature, results-driven processes and tools to achieve technically sound, cost effective solutions in hydrology/water sciences, geospatial analysis, information technology, resource management, conservation, and management and business process improvement.

We focus on putting the right people in the right place to be effective. And having the right people is critical for success. Our streamlined organization enables and empowers our talented professionals to tackle our customers' scientific and technical priorities – creatively and effectively.

Lynker offers a team-oriented work environment, and the opportunity to work in a culture of exceptionally skilled professionals who embrace sound science and creative solutions. Lynker's benefits include the following:

• Comprehensive healthcare for the employee at no monthly cost
• Healthcare benefit covers medical, prescription drug, dental, and vision
• Personal Time Off (PTO) Policy plus paid holidays
• Highly competitive compensation plan regularly calibrated against industry and location benchmarks
• 401(k) retirement plan with company-matching
• Employee Stock Ownership Plan (ESOP) – we're all company owners!
• Flexible spending accounts
• Employee assistance program (EAP)
• Short- and long-term disability insurance
• Life and accident insurance
• Tuition assistance/Training/Workforce improvement reimbursement per year
• Spot bonuses for exceptional performance
• Annual Employee Recognition Awards with bonuses
• Employee Referral Program
• Free centralized, self-directed Learning Management System to learn at your own pace
• Personalized career growth plans for every employee

Lynker is an E-Verify employer.

Lynker is an equal opportunity employer and makes all employment decisions based on merit, qualifications, and business needs. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, marital status, veteran status, or any other legally protected status under federal, state, or local laws.