Senior DoD RMF & eMASS Information Security Analyst

Caliber Systems Inc.; Washington, Northern (District of Columbia, KY); Hybrid; USD 89,000 - 110,000; Full time

Job summary

CALIBRE Systems, Inc. is seeking a Journeyman Information Security Analyst to support a DoD client with enterprise cybersecurity for a large program serving military families.

This hybrid role requires some meetings in Alexandria, VA and involves RMF, ATO sustainment, and vulnerability management across cloud and DoD information systems. The role emphasizes implementing DoD cybersecurity controls, maintaining compliance with RMF, STIGs/SRGs, and ACAS, with Top Secret clearance required.

Qualifications

• Active Top Secret clearance required.
• Bachelor’s degree in IT or related field.
• 5+ years of cybersecurity experience.
• Experience with RMF support and DoD activities.
• DoD 8570/8140-aligned certifications such as Security+ CE or CySA+.

Responsibilities

• Support RMF documentation and ATO sustainment using DoD eMASS platform.
• Conduct weekly DISA STIG/SRG and ACAS vulnerability assessments and reporting.
• Maintain POA&Ms and coordinate validation with ISSM, ISSO, and C&A teams.
• Monitor SIEM logs, compliance status, and GovCloud activity; escalate as needed.
• Assist vulnerability assessments and penetration testing for apps, servers, and infrastructure.
• Support incident reporting and coordination with Incident Response Team.

Skills

NIST RMF

eMASS

DISA STIG/SRG

ACAS

POA&Ms

Vulnerability analysis

Siem reporting

Incident response

Govt reporting

Zero Trust

Education

Master’s degree in IT

Bachelor’s degree in IT

Tools

eMASS

Job description

CALIBRE Systems, Inc. is seeking a Journeyman Information Security Analyst to support a DoD client with enterprise cybersecurity for a large program serving military families.

This hybrid role requires some meetings in Alexandria, VA and involves RMF, ATO sustainment, and vulnerability management across cloud and DoD information systems. The role emphasizes implementing DoD cybersecurity controls, maintaining compliance with RMF, STIGs/SRGs, and ACAS, with Top Secret clearance required.