Senior Cybersecurity Analyst / ISSO (SWY-CD)

GovCIO; US Coast Guard - Operations Systems Center (WV); Hybrid; USD 115,000 - 145,000; Full time

Job summary

GovCIO seeks a Senior Cybersecurity Analyst for the U.S. Coast Guard Software Yard in Kearneysville, WV. The role is hybrid and will serve as the aISSO for assigned systems, enforcing RMF, A&A, and SBOM practices across product teams.

You will embed cybersecurity into modern delivery models, manage vulnerabilities, and coordinate inspections, audits, and incident response within a federal environment.

Qualifications

• DoD 8570 IAT Level II certification required (Security+ CE, CySA+, CCNA Security or equivalent).
• Experience in DoD/Cybersecurity analysis within a federal environment focusing on applications, software assurance, or cloud security.
• Proven ability to analyze and remediate vulnerabilities from automated scans in CI/CD environments.
• Strong RMF, NIST and federal authorization knowledge and experience.
• Experience embedding security requirements into Agile development and rapid release cycles.

Responsibilities

• Lead RMF processes and prepare tailored documentation packages (SSP, CMP, IRP, etc.).
• Support A&A lifecycles and prepare for external inspections and audits.
• Manage POA&Ms from creation to closure and coordinate remediation activities.
• Interpret designs to identify data interconnections and security boundaries; produce ISA/MOU/SLA packages.
• Maintain Change Control processes and conduct Security Impact Assessments.
• Perform vulnerability testing using DISA tools and conduct security readiness reviews.
• Coordinate incident response actions and monitor HBSS compliance and rogue devices.
• Review logs and threat vectors; provide weekly status reports to Government stakeholders.
• Oversee annual contingency and disaster recovery testing and documentation.

Skills

DoD 8570 IAT Level II

Vulnerability management

RMF & NIST knowledge

Security compliance

Agile security integration

CI/CD security

Security incident response

Education

High School Diploma or equivalent

Tools

Jira

Azure DevOps

Tenable Security Center

ServiceNow

HBSS

Job description

GovCIO is seeking a Senior Cybersecurity Analyst to support a critical government computer system for the U.S. Coast Guard (USCG) Software Yard – Capability Development Branch. Located in Kearneysville, WV as a hybrid position, this role primarily ensures that all mission software, applications, and technology platforms remain secure, maintainable, and compliant with federal regulations throughout the continuous software delivery lifecycle. The successful candidate will serve as the designated alternate Information System Security Officer (aISSO) for assigned systems.

Responsibilities

As a Senior Cybersecurity Analyst and aISSO, you will serve as a primary technical resource for enforcing architectural coherence, enterprise security standards, and long-term sustainability across platform-aligned Product Teams. You will embed cybersecurity practices into modern delivery models to prevent vulnerabilities, manage risk, and maintain authorizations. Key responsibilities are:

• RMF & Compliance: Lead the RMF process. Generate, assess, and maintain tailored RMF documentation packages (including SSP, CMP, IRP, CP, POA&Ms, Scorecards, SAR, threat models, and boundary diagrams) using Government tools. Ensure all DoD IS documentation is current and accessible to authorized personnel.
• A&A Lifecycles: Review, update, and publish artifacts supporting unclassified efforts across all DHS SELC phases. Ensure timely A&A submissions to prevent ATO expiration. Provide direct collaboration and support for external inspections, audits, and assessments.
• POA&M Management: Track all system POA&Ms from creation to closure. Coordinate with stakeholders to validate AOR weakness remediations, manage proper channel routing, provide status reports, gather closure artifacts, and identify items requiring waivers or risk acceptance.
• Engineering & Architecture: Interpret system designs to identify data interconnections, interfaces, and protocols to minimize USCG risk. Develop connection approval packages (ISA, MOU, SLA) for USCG LANs (DoDIN, CGOne).
• Change Control: Maintain processes and procedures enabling adherence to organizational Requests for Modification (RFM). Participate in change management boards and conduct Security Impact Assessments (SIA).
• Vulnerability Assessments: Perform testing and control assessments using automated DISA STIG/SRG tools. Conduct Security Readiness Reviews (SRR) and analyze automated scans from DISA SCAP/SCC, ACAS, and Nessus.
• Incident Response & HBSS: Initiate protective/corrective measures upon discovery and establish user reporting pipelines for threats. Coordinate forensic analysis with CGCyber CSOC. Maintain HBSS compliance, review HBSS reports, and monitor/remediate rogue devices.
• Log Auditing & Reviews: Review exception/exclusion requests and provide technical recommendations for Government approval. Audit system logs and intrusion detection data weekly. Request weekly audit triggers to correlate daily records, analyze threat vectors across disparate systems, and report log data integrity gaps to the Government.
• Testing: Coordinate annual Contingency Plan (CP) training/testing before policy expiration, and manage annual Disaster Recovery (DR) Failover testing/documentation.

Qualifications

High School with 9+ years (or commensurate experience)

Required Skills & Experience

• DoD 8570 IAT Level II certification (Security+ CE, CySA+, CCNA Security, or equivalent).
• DoD Cybersecurity analysis experience specializing in application security, software assurance, or cloud security within a federal environment.
• Proven experience analyzing and remediating vulnerabilities identified by automated scanning tools within modern software delivery models (CI/CD).
• Comprehensive operational understanding of DISA STIGs, NIST Risk Management Framework (RMF), and federal authorization boundaries.
• Strong experience embedding security requirements into Agile engineering frameworks, product backlogs, and rapid release environments.
• Proficiency tracking, managing, and reporting cyber risks using enterprise tools (such as Jira, Azure DevOps, Tenable Security Center, or ServiceNow).
• Strong foundational understanding of diverse IT domains including enterprise architectures.

Clearance Required: Public Trust

Preferred Skills & Experience

• Experience supporting U.S. Coast Guard, Software Yard, or Department of Homeland Security (DHS) programs.
• Familiarity with USCG PEO C5I enterprise security strategies, software assurance policies, and continuous Authority to Operate (cATO) pathways.
• Relevant professional cybersecurity certifications highly preferred (e.g., CISSP, CEH, CISM, or DevSecOps security credentials).
• Understanding secure containerization concepts (Kubernetes, Docker) and automated security gating within DevSecOps environments.
• Familiarity with hybrid-cloud architecture (AWS, Azure) and securing web applications against OWASP Top 10 vulnerabilities.

Posted Salary Range

USD $115,000.00 - USD $145,000.00 /Yr.