Senior RMF Cyber Analyst & ISSO

COLSA Corporation; Huntsville (AL); On-site; USD 100,000 - 140,000; Full time

Job summary

COLSA Corporation seeks a Risk Management Framework (RMF) Cyber Analyst to serve as an Information Systems Security Officer (ISSO) for a US Army contract at the Aviation and Missile Center. The candidate will support ATO processes for multiple enclaves and major applications, both classified and unclassified, and will analyze cyber incidents with corrective action recommendations.

The role requires extensive RMF experience, DoD 8570 Level II/III certification, and a US Secret Clearance.

Qualifications

• Bachelor’s Degree or equivalent experience.
• 10+ years of work experience.
• CompTIA Security+ CE or equivalent DoD 8570 Level II/III certification.
• Solid understanding of RMF and A&A packages.
• Experience with STIGs/SRGs and security guidance.
• Experience with coordinating with security teams and system admins to resolve vulnerabilities.
• Experience using eMASS to create/update accreditation records.
• Ability to communicate technical information clearly.
• US Secret Clearance and US Citizenship required.

Responsibilities

• Analyze and implement RMF/IA requirements into A&A packages.
• Develop a Security-Focused Configuration Management Plan.
• Monitor security controls and perform risk assessments.
• Support eMASS artifacts and SSP updates.
• Prepare data for accreditation package submissions and RMF actions.
• Provide recommendations on overall system security and architecture.
• Collaborate with System Administrators on vulnerability resolution.

Skills

RMF knowledge

Accreditation/AA processes

Clear communication

Education

Bachelor’s Degree in related field

Tools

eMASS

STIG Viewer

Job description

COLSA Corporation seeks a Risk Management Framework (RMF) Cyber Analyst to serve as an Information Systems Security Officer (ISSO) for a US Army contract at the Aviation and Missile Center. The candidate will support ATO processes for multiple enclaves and major applications, both classified and unclassified, and will analyze cyber incidents with corrective action recommendations.

The role requires extensive RMF experience, DoD 8570 Level II/III certification, and a US Secret Clearance.