Senior Cybersecurity Analyst: RMF/ATO & DoD Cloud Security

Concept Plus; United States; Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Health, dental, vision insurance

Paid time off

11 holidays

Performance bonuses

Tuition reimbursement

Unlimited training

Job summary

Concept Plus is seeking a skilled Cybersecurity Analyst to support a DoD software modernization project. You will manage the RMF/ATO lifecycle, risk assessments, and continuous monitoring within an Agile/DevSecOps framework.

You will perform vulnerability scanning with Nessus, eMASS, SonarQube, Checkmarx, Trivy, and Dependency Track, ensure compliance with DoD policies, and collaborate with ISSMs and AO representatives on audits and risk mitigation.

Qualifications

• US Citizen with active DoD Secret Clearance (or ability to obtain one).
• Bachelor's Degree in an IT related field.
• 8+ years of experience as Cyber Analyst.
• 5+ years' experience with ATO procurement in Cloud Environment.
• 5+ years in DoD Environment.
• 5+ Years Experience with the Risk Management Framework Process.
• 5+ Years Experience operating eMASS.

Responsibilities

• Lead and maintain RMF/ATO lifecycle and update SSPs, POA&M, risk assessments, and continuous monitoring artifacts.
• Ensure system confidentiality, integrity, and availability per DoD policies (NIST 800-53, DoDI 8500.01/8510.01).
• Support Agile/DevSecOps deployments and CI/CD pipelines with security requirements.
• Perform vulnerability scanning and remediation using Nessus, eMASS, SonarQube, Checkmarx, Trivy, Dependency Track.
• Cloud-focused vulnerability scanning and remediation per cloud security baselines.
• Provide security engineering support: secure architecture input, SSO/SSL, secure config guidance.
• Collaborate with ISSMs and AO reps to support audits, inspections, and risk mitigation.
• Track, report, and respond to cybersecurity incidents with timely actions.
• Develop security documentation: ISAs, MOAs, SoD matrices, architecture diagrams, security artifacts.
• Monitor project progress and deliver cybersecurity reports and risk insights to leadership.
• Communicate effectively with internal teams, customers, and stakeholders.

Skills

RMF/ATO lifecycle

NIST 800-53 compliance

Agile/DevSecOps

Security reporting

Vulnerability management

Education

Bachelor's Degree in IT

Tools

Nessus

eMASS

SonarQube

Checkmarx

Trivy

Dependency Track

Job description

Concept Plus is seeking a skilled Cybersecurity Analyst to support a DoD software modernization project. You will manage the RMF/ATO lifecycle, risk assessments, and continuous monitoring within an Agile/DevSecOps framework.

You will perform vulnerability scanning with Nessus, eMASS, SonarQube, Checkmarx, Trivy, and Dependency Track, ensure compliance with DoD policies, and collaborate with ISSMs and AO representatives on audits and risk mitigation.