Senior Cybersecurity Analyst & RMF/ISSM Lead

Serco; Norman (OK); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical, dental and vision insurance

401(k) with employer matching

Tuition reimbursement

Job summary

Serco Inc. is seeking a Cybersecurity Analyst / ISSM to support the 76th Software Maintenance Group at Tinker AFB, OK. The ISSM will act as the senior security authority and SME, ensuring DoD cybersecurity compliance, managing ATO, and guiding technical teams in protecting classified environments.

You will lead the enforcement of DoD, AF, and NIST policies, manage RMF lifecycle activities, and oversee security documentation and vulnerability management across hybrid Windows/Linux environments.

Qualifications

• Active DoD Top Secret clearance with SCI eligibility.
• RMF ATO process experience.
• 8+ years of Cybersecurity experience (or 10 years with Associate's).
• DoD 8570 IAM Level III or equivalent qualifications.
• Experience with Windows/Linux environments.

Responsibilities

• Lead DoD, Air Force, and NIST Cybersecurity policy implementation.
• Maintain RMF lifecycle: categorization, control selection, validation, monitoring.
• Manage SSPs, POA&Ms, Incident Response Plans, and Contingency Plans in eMASS.
• Conduct security inspections, audits, and compliance reviews.
• Apply RMF controls to CI/CD and IaC pipelines.

Skills

Cybersecurity expertise

RMF/DoD compliance

STEM leadership & mentorship

Stakeholder guidance

Vulnerability management

Education

Bachelor's degree in Cybersecurity

Associate's degree + 10+ years exp.

Tools

eMASS

ACAS/Tenable

Kubernetes

Job description

Serco Inc. is seeking a Cybersecurity Analyst / ISSM to support the 76th Software Maintenance Group at Tinker AFB, OK. The ISSM will act as the senior security authority and SME, ensuring DoD cybersecurity compliance, managing ATO, and guiding technical teams in protecting classified environments.

You will lead the enforcement of DoD, AF, and NIST policies, manage RMF lifecycle activities, and oversee security documentation and vulnerability management across hybrid Windows/Linux environments.