Security Analyst II

Sacramento Native American Health Center, Inc; Clearfield (UT); On-site; USD 75,000 - 85,000; Full time

Benefits offered by this job

Health coverage

Dental coverage

Vision coverage

Life insurance

401(k) with company match

Paid holidays

Job summary

ISSE Services is seeking a Security Analyst II to implement and manage RMF controls for assigned information systems, coordinating with the ISSM to ensure compliance with NIST RMF SP 800-37 and SP 800-53. The role includes maintaining RMF documentation and monitoring vulnerabilities.

You will support ATO activities, coordinate with admins and security teams, and advise leadership on risk mitigation while ensuring operational security across the environment.

Qualifications

• Bachelor’s degree in Cybersecurity, CS, IT, or related field.
• 2-7 years in cybersecurity.
• Audit/compliance experience.
• Practical System Administration experience.
• Strong analytical, communication, and leadership skills.

Responsibilities

• Implement and manage RMF 800-53r5 security controls for assigned information systems in coordination with ISSM.
• Assist ISSM maintain RMF artifacts (SSP, POA&M, SAR, continuous monitoring reports).
• Support system authorization (ATO) and reauthorization activities.
• Monitor system security posture and ensure policy compliance.
• Coordinate vulnerability scanning, patching, and remediation efforts.
• Support security audits, inspections, and assessments.
• Ensure security incidents are reported per policy.
• Advise leadership on system risks and mitigations.

Skills

RMF 800-53r5

Vulnerability assessment

Policy compliance

Audit coordination

Communication

Leadership

Education

Bachelor’s degree in Cybersecurity, CS, IT

Tools

SSP

POA&M

SAR

RMF artifacts

Job description

• Base Pay $75,000.00 - $85,000.00 / Year
• Job Category SOC/NOC
• Employee Type FT Non-Exempt

Description

Security Analyst II

Annual pay range $75,000 to $85,000 (Non-Exempt, Hourly)

WE ARE A CONTRACTED FEDERAL DRUG-FREE WORKPLACE

All shifts available in 24/7 Operations Center

(Day, Swing, Grave)

About ISSE Services

ISSE Services is a cybersecurity and mission assurance company supporting defense, aerospace, and regulated industry customers. We specialize in Governance, Risk, and Compliance (GRC), cybersecurity engineering, managed security services, and CMMC readiness for organizations handling Controlled Unclassified Information (CUI).

Our mission is to help customers securely enable and accelerate their operations through practical compliance, technical expertise, and mission-focused security solutions.

About the Role

ISSE Services has vast experience maintaining the ATO and coordinating the Prime to ensure continued compliance with the RMF controls. The ATO control baseline (r5 and the SAF/CN control set) has recently been increased to a larger workload with more controls being required than in previous ATO cycles.

The Security Analyst II supports theInformation System Security Manager (ISSM)by implementing and managing security controls in accordance withNIST RMF (SP 800-37)and applicable control baselines (e.g.,NIST SP 800-53). The Security Analyst II ensures that system security requirements are met during system development, operation, and maintenance, and that risks are identified, documented, and mitigated.

The Security Analyst II is responsible forassisting the ISSM inmaintaining RMF documentation such as theSystem Security Plan (SSP),Security Assessment Plan (SAP),Security Assessment Report (SAR),Plan of Action and Milestones (POA&M), and continuous monitoring artifacts. They track vulnerabilities, ensure timely remediation, and coordinate with system administrators, engineers, and security teams to implement technical, administrative, and operational controls.

Key Responsibilities

• Implement and manage RMF 800-53r5 security controls for assigned information systems in coordination with ISSM
• Assist ISSM maintain RMF artifacts (SSP, POA&M, SAR, continuous monitoring reports)
• Support system authorization (ATO) and reauthorization activities
• Monitor system security posture and ensure compliance with policies and standards
• Coordinate vulnerability scanning, patching, and remediation efforts
• Support security audits, inspections, and assessments
• Ensure security incidents are reported and handled per policy
• Advise leadership on system risks and mitigation strategies

Requirements

Required Qualifications

• Education: Bachelor’s degree in Cybersecurity, Computer Science, IT, or related field (or equivalent experience).
• Experience: 2-7 years in cybersecurity.
• Audit/Compliance experience.
• Practical System Administration experience.
• Soft Skills: Strong analytical skills, ability to work under pressure, excellent communication skills, and team leadership capabilities.

The ideal candidate must have CompTIA Security+ at least one of the following certifications: GMON, SecurityX / CASP+, CCISO, CCSP, CGRC/CAP, CISSO, Cloud+, GCSA, GSEC, SSCP

Nice to have but not required: CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, GSLC

Summary

Why You'll Love It Here

• A mission-driven organization where your work directly supports federal programs that make a difference.
• Competitive salary and performance-based bonuses.
• Comprehensive health, dental, and vision coverage, company paid life insurance, long-term and short-term disability plus 401(k) with company match.
• Generous PTO and 11 paid federal holidays.
• Professional development support, including an annual training and certification budget.
• A collaborative, respectful culture that values both precision and innovation.

We are an equal opportunity employer and celebrate diversity. All qualified applicants will receive consideration without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, disability, or veteran status.