Senior InfoSec Analyst: RMF Lead & DoD Compliance

Wood River Federal, LLC; San Antonio (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Wood River Federal, LLC is seeking a Senior Information Security Analyst to lead RMF/ATO activities, develop security artifacts, and ensure compliance with DoD and NIST standards. The role emphasizes risk management, vulnerability remediation, and security operations across the system lifecycle.

The ideal candidate will have extensive RMF experience, strong vulnerability management skills with ACAS/Nessus, proficiency with SIEM, and the ability to guide system owners and admins in enforcing

Qualifications

• :// Must possess a minimum of seven (7) years of progressive experience in an information security, cybersecurity, or IA role.
• // At least three (3) years of direct, hands-on experience serving as an ISSO or RMF/ATO process for DoD systems.
• // DoD 8140 IAT Level II requirements via Security+ CE or higher.
• // Advanced certifications such as CASP+ CE and CISM are highly desired.
• // Eligible to obtain and hold a DoW security clearance.

Responsibilities

• Lead RMF/ATO documentation and maintain SSP, Contingency Plan, and Incident Response Plan.
• Perform vulnerability scanning and coordinate remediation with system administrators.
• Monitor SIEM and other security tools to detect, respond to threats and conduct investigations.
• Develop and enforce DoD-based security policies, STIGs, and security guidance across the system lifecycle.

Skills

RMF/NIST

Vulnerability Scanning

SIEM/Monitoring

DoD STIGs

Network Security

OS Hardening

Policy Guidance

Security Clearance Eligibility

Tools

ACAS/Nessus

Job description

Wood River Federal, LLC is seeking a Senior Information Security Analyst to lead RMF/ATO activities, develop security artifacts, and ensure compliance with DoD and NIST standards. The role emphasizes risk management, vulnerability remediation, and security operations across the system lifecycle.

The ideal candidate will have extensive RMF experience, strong vulnerability management skills with ACAS/Nessus, proficiency with SIEM, and the ability to guide system owners and admins in enforcing