RMF Security Analyst — TS/SCI, On-Site in CO Springs

careers-i2xisys; Colorado Springs (CO); On-site; USD 120,000 - 150,000; Full time

Job summary

I2X Technologies seeks an RMF Analyst to support ongoing DoD programs in Colorado Springs, CO. The role requires on-site work and active TS/SCI clearance.

You will manage RMF lifecycles, develop SSPs, and coordinate POA&Ms while collaborating with cross-functional teams to uphold compliance across enterprise systems. Responsibilities include continuous monitoring, CORA readiness, and ensuring STIGs are implemented, with proactive reporting to leadership and system owners.

Qualifications

• Three to five years of information assurance or cybersecurity experience (DoD) required.
• DoDM 8140.03 intermediate certification required (e.g., Security+).
• Experience managing RMF lifecycle artifacts and eMASS packages.
• Ability to work autonomously and lead cross-functional teams.
• U.S. citizenship and TS/SCI clearance required.

Responsibilities

• RMF process across enterprise systems using eMASS.
• Own and drive continuous monitoring and ATO sustainment.
• Maintain security posture for CORA readiness.
• Manage DoD/NIST SP 800-53 requirements.
• Analyze scan results from ACAS/SCAP and other approved tools.
• Lead SSP development and STIG implementation.
• Own POA&Ms and coordinate closure with stakeholders.
• Collaborate with sys admins and leadership to remediate findings.
• Provide strategic cybersecurity guidance and status updates.
• Provide weekly status reports summarizing accomplishments and risks.
• Create, refine, and enforce security policies and artifacts.

Skills

RMF lifecycle

eMASS

POA&M tracking

ISSO experience

autonomy

Education

Bachelor’s degree in information assurance or cybersecurity

Tools

STIG Viewer

Automated compliance tools

Job description

I2X Technologies seeks an RMF Analyst to support ongoing DoD programs in Colorado Springs, CO. The role requires on-site work and active TS/SCI clearance.

You will manage RMF lifecycles, develop SSPs, and coordinate POA&Ms while collaborating with cross-functional teams to uphold compliance across enterprise systems. Responsibilities include continuous monitoring, CORA readiness, and ensuring STIGs are implemented, with proactive reporting to leadership and system owners.