Senior Cybersecurity Analyst (RMF/ISSO Lead)

Colsa-; Huntsville (AL); On-site; USD 120,000 - 180,000; Full time

Job summary

COLSA Corporation is seeking a Senior Cybersecurity Analyst (RMF/ISSO Lead) to support a U.S. Army contract on-site at Redstone Arsenal in Huntsville, Alabama. You will oversee RMF activities, lead the ATO process, and provide guidance to a team of cybersecurity analysts across classified and unclassified networks.

Responsibilities include RMF A&A, eMASS documentation, vulnerability management, and security control monitoring. Active Secret clearance and DoD policy knowledge are essential.

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 10+ years of related experience with DoD/DoJ/DoW posture preferred.
• DoD 8570 Level II/III certification or equivalent.
• Strong RMF knowledge and A&A package development experience.
• Hands-on with eMASS and security artifacts (SSPs, POA&Ms, risks).
• Familiarity with STIGs/SRGs and federal security standards.
• Active Secret clearance and U.S. citizenship required.

Responsibilities

• Lead RMF Assessment and Authorization activities and ATO submissions.
• Maintain system security documentation and artifacts in eMASS.
• Implement and monitor security controls for compliance.
• Develop security configuration management plans and ISCM support.
• Conduct security assessments and vulnerability reviews.
• Monitor DISA STIGs/SRGs and use assessment tools.
• Collaborate with admins and government engineers to resolve issues.
• Mentor and supervise COLSA cybersecurity analysts and provide reports.

Skills

RMF

ISSO leadership

A&A packages

eMASS usage

STIGs/SRGs

NIST SP 800-53

RMF knowledge

vulnerability management

leadership

Education

Bachelor's degree

Master's degree

Tools

eMASS

STIG Viewer

Evaluate-STIG

Nessus/ACAS

HBSS Trellix

Splunk/Elasticsearch

Job description

Senior Cybersecurity Analyst (RMF/ISSO Lead)

COLSA Corporation is seeking a Senior Cybersecurity Analyst (RMF/ISSO Lead) to support a U.S. Army contract. This position is located on-site at Redstone Arsenal in Huntsville, Alabama.The selected candidate will serve as an Information Systems Security Officer (ISSO), overseeing Risk Management Framework (RMF) activities and supporting the Authorization to Operate (ATO) process for multiple information systems, including enclaves and major applications across classified and unclassified networks.This position will also provide technical guidance and supervision to an existing team of cybersecurity analysts, coordinate with system and network administrators and government engineering teams, and support continuous monitoring, vulnerability management, and security compliance activities.

*Principal Duties and Responsibilities (Essential Functions):

• Manage RMF Assessment and Authorization (A&A) activities, including the development, maintenance, and submission of authorization packages in accordance with DoD and Army cybersecurity requirements.
• Maintain and update system security documentation and authorization artifacts in eMASS, including System Security Plans (SSPs), security architectures, hardware and software inventories, Plans of Action and Milestones (POA&Ms), and risk acceptance memoranda.
• Implement, assess, and monitor security controls to maintain compliance with applicable cybersecurity requirements and support ongoing authorization activities.
• Develop and maintain security-focused configuration management plans and support Information System Owners in fulfilling Information Security Continuous Monitoring (ISCM) responsibilities.
• Conduct security assessments, vulnerability audits, configuration reviews, and security impact analyses to identify and mitigate cybersecurity risks.
• Monitor compliance with DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) using tools such as STIG Viewer and Evaluate-STIG.
• Analyze security findings and monitoring data using tools such as Tenable Nessus/ACAS, Trellix Government Cyber Suite (HBSS), Splunk, Elasticsearch, and other cybersecurity tools.
• Collaborate with system and network administrators and government engineering teams to troubleshoot security issues, remediate vulnerabilities, and resolve cybersecurity incidents.
• Identify deviations from approved system configurations, security baselines, and applicable policies, and recommend corrective actions.
• Support the implementation and troubleshooting of security software and provide recommendations to strengthen system and network security.
• Prepare technical documentation, reports, and recommendations to support RMF authorization decisions and ongoing security compliance.
• Develop cybersecurity training materials and provide technical guidance and mentoring to team members.
• Supervise assigned COLSA cybersecurity analysts, including managing work assignments, schedules, timekeeping, performance evaluations, and professional development.
• Prepare and provide weekly and monthly team status reports.
• Perform other duties as assigned

At COLSA, people are our most valuable resource and centered at our core value. We invite you to unite your talents with opportunity and be a part of our “Family of Professionals!” Learn about our employee-centric culture and benefits here: https://www.colsa.com/culture_benefits

Required Experience

Required Qualifications

• Bachelor's degree in a related field or equivalent experience.
• Minimum of 10 years of related experience, including at least 8 years supporting a DoD, DoW, or DoJ agency or department.
• CompTIA Security+ CE or equivalent DoD 8570 Level II/III certification.
• Strong knowledge of and experience with the Risk Management Framework (RMF), including developing Assessment and Authorization (A&A) packages.
• Hands-on experience using Enterprise Mission Assurance Support Service (eMASS), including directly creating and updating system records.
• Thorough knowledge of Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
• Strong knowledge of applicable federal, DoD, and Army cybersecurity policies and standards, including DoDI 8510.01 and NIST SP 800-53.
• Strong technical understanding of information systems and networks, with the ability to effectively collaborate with system and network administrators and government engineering teams to troubleshoot and resolve technical issues.
• Prior experience supervising cybersecurity or technical personnel.
• Active Secret security clearance; U.S. citizenship required.

Preferred Qualifications

Master's degree in a related field or equivalent experience.

Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information. COLSA Corporation is an Equal Opportunity Employer, Minorities/Females/Veterans/Disabled. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.

Salary Type

Annually

The salary range, if referenced, represents a good faith estimate. COLSA considers various factors when determining base salary offers, but not limited to, location, the role, function and associated responsibilities, a candidate’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements.

COLSA offers a comprehensive and customizeable benefits program which includes Medical, Dental, Vision, Life Insurance, Short-Term Disability, Long-Term Disability, Accidental Death & Dismemberment, Supplemental Income Protection Programs, 401(k) with company match, Flexible Spending Accounts, Employee Assistance Program, Education & Certification Reimbursement, Employee Discount Program, Paid Time Off and Holidays.

This position will be posted for a minimum of 3 business days. If a candidate has not been selected at that time, it will continue to be posted until a suitable candidate is selected or the position is closed.