RMF Cybersecurity Analyst — DoD/IC Risk & Compliance

Pueo Business Solutions LLC; Virginia, Northern (IL, KY); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Pueo Business Solutions LLC is seeking a Cybersecurity Analyst to support RMF lifecycle activities and ensure alignment with DoD and DIA cybersecurity standards. The role focuses on vulnerability management, continuous monitoring, and risk-informed decision-making across information systems.

Collaborate with ISSMs, ISSOs, SCAs, and PMs to execute security controls, maintain documentation, and prepare for audits. Strong communication and cross-team coordination are essential.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field.
• Obtain and maintain an IAT Level III certification, or maintain an IAT Level II certification, per DoD 8570.01-M and DoD Directive 8140.
• Acceptable certifications include: CySA+, Security+, CND v3, CCNA Security, GICSP, GSEC, SSCP.

Responsibilities

• Support information systems throughout the RMF lifecycle, ensuring compliance with applicable cybersecurity policies, standards, and regulations.
• Collaborate with ISSMs, ISSOs, SCAs, PMs, and stakeholders to support security initiatives and compliance efforts.
• Assist stakeholders in understanding cybersecurity risks, vulnerability impacts, and remediation priorities to improve system security posture.
• Provide technical support for continuous monitoring activities, compliance reporting, and audit readiness initiatives.
• Evaluate cybersecurity implications of system modifications, upgrades, and configuration changes.
• Support implementation, assessment, and documentation of security controls.
• Maintain and update cybersecurity documentation, authorization packages, and RMF artifacts.
• Document vulnerabilities, misconfigurations, and security findings clearly to support remediation planning and stakeholder awareness.
• Utilize Xacta or similar Cyber Risk Management platforms to manage risk assessments, security control evidence, compliance status, and POA&M activities.
• Track and manage POA&M items to ensure vulnerabilities identified through scans, assessments, or audits are properly documented, mitigated, and resolved.
• Analyze vulnerability and compliance data to identify trends, recurring issues, and opportunities for security improvements.
• Promote cybersecurity best practices and ensure alignment with organizational and mission objectives.

Skills

Verbal & written comms

Vulnerability reports

Analytical thinking

Root-cause analysis

Cross-team collaboration

Prioritization

Security documentation

Education

Bachelor’s degree in Cybersecurity/CS/IT

IAT Level III or Level II (DoD 8570.01-M)

Tools

Xacta

STIG Viewer

ACAS

Prisma

Splunk

Trellix HBSS

Job description

Pueo Business Solutions LLC is seeking a Cybersecurity Analyst to support RMF lifecycle activities and ensure alignment with DoD and DIA cybersecurity standards. The role focuses on vulnerability management, continuous monitoring, and risk-informed decision-making across information systems.

Collaborate with ISSMs, ISSOs, SCAs, and PMs to execute security controls, maintain documentation, and prepare for audits. Strong communication and cross-team coordination are essential.