Secret-Cleared DoD InfoSec Analyst - RMF & IR

CALIBRE Systems, Inc.; Washington (District of Columbia); Hybrid; USD 80,000 - 90,000; Full time

Job summary

CALIBRE Systems, Inc. is seeking a Journeyman Information Security Analyst to support a DoD client with enterprise cybersecurity for a large program serving military families. The role is hybrid with required meetings in Alexandria, VA.

The analyst will handle RMF, vulnerability management, incident response, and compliance activities for DoD cloud and information systems, ensuring ATOs and ongoing DoD/NIST RMF compliance including STIGs, ACAS, and eMASS.

Qualifications

• Active Secret clearance required.
• Experience with RMF and ATO processes for DoD programs.
• Knowledge of DoD cyber standards (NIST RMF, STIG/SRG, ACAS) is preferred.

Responsibilities

• Support RMF documentation, security control implementation, assessment activities, and ATO sustainment using the DoD eMASS platform.
• Conduct weekly DISA STIG/SRG and ACAS vulnerability assessments, assist with remediation tracking, and prepare scan outputs, weekly threat reports, and ACAS roll-up reports.
• Maintain and update POA&Ms, collect evidence of completion, and coordinate validation with ISSM, ISSO, and Security Control Assessment teams.
• Monitor cybersecurity resources, SIEM-integrated logs, anomaly indicators, account aging, compliance status, WAF/NGFW activity, and GovCloud logs; escalate abnormal findings within required timelines.
• Support daily review of the DC3 Vulnerability Disclosure Program portal and assist with creation and mitigation of associated POA&Ms.
• Assist with vulnerability assessments and penetration testing for new or modified applications, servers, databases, and infrastructure components before deployment.
• Support incident reporting, documentation, and coordination with the Incident Response Team and Tier 2 Cybersecurity Service Provider.
• Contribute to weekly cybersecurity activity reporting, including compliance status, vulnerability assessments, incident management, and risk metrics.
• Support contingency planning, disaster recovery exercises, SOP audits, and cybersecurity exercise activities as directed.
• Access SIPRNet and attend classified briefings at the Government facility in Alexandria, Virginia, as required.

Skills

RMF Knowledge

Vulnerability Mgmt

Incident Response

Compliance Tracking

DoD Standards

Tools

ACAS

eMASS

SIEM

Job description

CALIBRE Systems, Inc. is seeking a Journeyman Information Security Analyst to support a DoD client with enterprise cybersecurity for a large program serving military families. The role is hybrid with required meetings in Alexandria, VA.

The analyst will handle RMF, vulnerability management, incident response, and compliance activities for DoD cloud and information systems, ensuring ATOs and ongoing DoD/NIST RMF compliance including STIGs, ACAS, and eMASS.