Senior Cybersecurity Analyst / ISSO (SWY-CD)

GovCIO; Northern (KY); Hybrid; USD 115,000 - 145,000; Full time

Job summary

GovCIO is seeking a Senior Cybersecurity Analyst to support a U.S. Coast Guard software program. The hybrid role is located in Kearneysville, WV, and will serve as the alternate Information System Security Officer (aISSO) for assigned systems.

The role enforces architectural coherence, enterprise security standards, and risk management across product teams, embedding cybersecurity into modern delivery models and managing RMF processes and A&A efforts.

Qualifications

• DoD 8570 IAT II certification required (Security+ CE, CySA+, CCNA Security, or equivalent).
• DoD cybersecurity experience in federal environment focusing on application security, software assurance, or cloud security.
• Experience remediating vulnerabilities identified by automated scanners in modern CI/CD pipelines.
• Strong knowledge of DISA STIGs, RMF, and federal authorization boundaries.
• Ability to embed security requirements into Agile backlogs and delivery cycles.
• Proficiency in tracking and reporting cyber risks using enterprise tools (Jira, Azure DevOps, Tenable, ServiceNow).
• Understanding of diverse IT domains and enterprise architectures.

Responsibilities

• Lead RMF process and maintain tailored documentation (SSP, CMP, IRP, POA&Ms).
• Support A&A lifecycles across DHS SELC phases and assist with inspections and audits.
• Manage POA&Ms and coordinate with stakeholders to validate mitigations.
• Interpret system designs to minimize risk and prepare connection packages (ISA, MOU, SLA).
• Maintain Change Control processes and participate in SIA assessments.
• Perform vulnerability testing and security readiness reviews using automated tools.
• Coordinate incident response, HBSS compliance, and log reviews.

Skills

DoD 8570 IAT Level II

Cybersecurity analysis experience

Vulnerability remediation

RMF & NIST

Agile security

Security tooling

Kubernetes & Docker security

Hybrid-cloud security

Education

High School Diploma

Tools

Jira

Azure DevOps

Tenable Security Center

ServiceNow

DISA STIG/SRG tools

Nessus

ACAS

Kubernetes

Docker

Job description

GovCIO is seeking a Senior Cybersecurity Analyst to support a critical government computer system for the U.S. Coast Guard (USCG) Software Yard – Capability Development Branch. Located in Kearneysville, WV as a hybrid position, this role primarily ensures that all mission software, applications, and technology platforms remain secure, maintainable, and compliant with federal regulations throughout the continuous software delivery lifecycle. The successful candidate will serve as the designated alternate Information System Security Officer (aISSO) for assigned systems.

Responsibilities

As a Senior Cybersecurity Analyst and aISSO, you will serve as a primary technical resource for enforcing architectural coherence, enterprise security standards, and long-term sustainability across platform-aligned Product Teams. You will embed cybersecurity practices into modern delivery models to prevent vulnerabilities, manage risk, and maintain authorizations. Key responsibilities are:

• RMF & Compliance: Lead the RMF process. Generate, assess, and maintain tailored RMF documentation packages (including SSP, CMP, IRP, CP, POA&Ms, Scorecards, SAR, threat models, and boundary diagrams) using Government tools. Ensure all DoD IS documentation is current and accessible to authorized personnel.
• A&A Lifecycles: Review, update, and publish artifacts supporting unclassified efforts across all DHS SELC phases. Ensure timely A&A submissions to prevent ATO expiration. Provide direct collaboration and support for external inspections, audits, and assessments.
• POA&M Management: Track all system POA&Ms from creation to closure. Coordinate with stakeholders to validate AOR weakness remediations, manage proper channel routing, provide status reports, gather closure artifacts, and identify items requiring waivers or risk acceptance.
• Engineering & Architecture: Interpret system designs to identify data interconnections, interfaces, and protocols to minimize USCG risk. Develop connection approval packages (ISA, MOU, SLA) for USCG LANs (DoDIN, CGOne).
• Change Control: Maintain processes and procedures enabling adherence to organizational Requests for Modification (RFM). Participate in change management boards and conduct Security Impact Assessments (SIA).
• Vulnerability Assessments: Perform testing and control assessments using automated DISA STIG/SRG tools. Conduct Security Readiness Reviews (SRR) and analyze automated scans from DISA SCAP/SCC, ACAS, and Nessus.
• Incident Response & HBSS: Initiate protective/corrective measures upon discovery and establish user reporting pipelines for threats. Coordinate forensic analysis with CGCyber CSOC. Maintain HBSS compliance, review HBSS reports, and monitor/remediate rogue devices.
• Log Auditing & Reviews: Review exception/exclusion requests and provide technical recommendations for Government approval. Audit system logs and intrusion detection data weekly. Request weekly audit triggers to correlate daily records, analyze threat vectors across disparate systems, and report log data integrity gaps to the Government.
• Testing: Coordinate annual Contingency Plan (CP) training/testing before policy expiration, and manage annual Disaster Recovery (DR) Failover testing/documentation.

Qualifications

High School with 9+ years (or commensurate experience)

Required Skills & Experience

• DoD 8570 IAT Level II certification (Security+ CE, CySA+, CCNA Security, or equivalent).
• DoD Cybersecurity analysis experience specializing in application security, software assurance, or cloud security within a federal environment.
• Proven experience analyzing and remediating vulnerabilities identified by automated scanning tools within modern software delivery models (CI/CD).
• Comprehensive operational understanding of DISA STIGs, NIST Risk Management Framework (RMF), and federal authorization boundaries.
• Strong experience embedding security requirements into Agile engineering frameworks, product backlogs, and rapid release environments.
• Proficiency tracking, managing, and reporting cyber risks using enterprise tools (such as Jira, Azure DevOps, Tenable Security Center, or ServiceNow).
• Strong foundational understanding of diverse IT domains including enterprise architectures.

Clearance Required: Public Trust

Preferred Skills & Experience

• Experience supporting U.S. Coast Guard, Software Yard, or Department of Homeland Security (DHS) programs.
• Familiarity with USCG PEO C5I enterprise security strategies, software assurance policies, and continuous Authority to Operate (cATO) pathways.
• Relevant professional cybersecurity certifications highly preferred (e.g., CISSP, CEH, CISM, or DevSecOps security credentials).
• Understanding secure containerization concepts (Kubernetes, Docker) and automated security gating within DevSecOps environments.
• Familiarity with hybrid-cloud architecture (AWS, Azure) and securing web applications against OWASP Top 10 vulnerabilities.

Posted Salary Range

USD $115,000.00 - USD $145,000.00 /Yr.