Cyber Security Analyst / Information System Security Manager (IS

Caribou Thunder
Colorado Springs, United States of America
20 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Senior
Compensation
$ 120K

Job location

Colorado Springs, United States of America

Tech stack

Microsoft Access
Computer Security
Information Systems
Identity and Access Management
Information Security Management
Zero Trust Network Access
SAP Applications
Security Software
Security Information and Event Management
Software Vulnerability Management
Information Technology
Patch Management
Nessus
Vulnerability Analysis

Job description

Support mission-critical nuclear defense systems-leading cybersecurity operations, Risk Management Framework (RMF) activities, and information assurance initiatives that protect some of the nation's most sensitive Air Force capabilities. A Day in the Life - What you'll do

  • Lead and manage the full lifecycle of the Risk Management Framework (RMF) process for mission-critical information systems.
  • Guide systems through the Authorization to Operate (ATO) process while ensuring continuous monitoring and compliance.
  • Develop, implement, and enforce cybersecurity policies, procedures, and security controls aligned with DoD and Federal standards.
  • Oversee daily cybersecurity operations including vulnerability management, patching, incident response, and security assessments.
  • Conduct vulnerability analysis and remediation activities using tools such as ACAS and Nessus.
  • Serve as the principal cybersecurity advisor to leadership, providing risk analysis, mitigation strategies, and security recommendations.
  • Lead and mentor cybersecurity analysts, administrators, and engineers supporting enterprise and classified environments.
  • Manage Assessment and Authorization (A&A) documentation, system security plans, risk acceptance documentation, and compliance artifacts.
  • Coordinate with system owners, engineers, and stakeholders to support audits, inspections, and cybersecurity assessments.
  • Ensure compliance with DoD cybersecurity directives, NIST standards, and Information Assurance policies.
  • Support continuous improvement initiatives focused on strengthening cybersecurity posture and operational resilience.
  • Collaborate across multidisciplinary teams supporting highly sensitive national defense programs.

Requirements

  • Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Engineering, or related STEM discipline
  • 5-8 years of specialized experience supporting DoD cybersecurity and Information Assurance environments
  • Active Top Secret security clearance with eligibility for SCI and SAP access
  • Current DoD 8140/8570 IAM Level III certification (CISSP, CISM, CCISO, or equivalent)
  • Demonstrated expertise with the Risk Management Framework (RMF) process and Authorization to Operate (ATO) lifecycle
  • Strong knowledge of NIST standards, DoD cybersecurity directives, and Federal security compliance requirements
  • Experience managing vulnerability assessments, remediation activities, and security operations
  • Experience with cybersecurity tools such as ACAS, Nessus, and enterprise vulnerability management platforms
  • Experience developing and maintaining Assessment & Authorization (A&A) documentation packages
  • Strong leadership, communication, and team management skills
  • Ability to analyze cybersecurity risks and develop effective mitigation strategies
  • Experience working in classified or mission-critical DoD environments, * Master's degree in Cybersecurity, Information Assurance, Computer Science, or related field
  • Experience serving as an Information System Security Manager (ISSM) within Air Force or DoD environments
  • Knowledge of Special Access Program (SAP) security requirements and classified system operations
  • Experience supporting nuclear, strategic deterrence, or weapons systems programs
  • Familiarity with enterprise patch management, SIEM technologies, and incident response frameworks
  • Experience leading cybersecurity audits, inspections, and compliance initiatives
  • Understanding of Zero Trust Architecture and modern cybersecurity frameworks
  • Experience with system hardening, STIG implementation, and secure configuration management
  • Strong technical writing and documentation experience supporting executive leadership and compliance reviews

Benefits & conditions

Premium Health, Dental & Vision Insurance 401(k) with 6% Company Match Flexible PTO & Work Schedule Education & Certification Reimbursement Support for Military Leave Work-Life Balance & Traditional Family Values

About the company

Caribou Thunder is a HUBZone-certified small business providing advanced technical and engineering services to the U.S. Department of War and its mission partners. 35+ states and 20+ countries. We've delivered trusted solutions for over two decades - strengthening national readiness across missions on land, undersea, in the air, and throughout LEO, MEO, GEO, and deep space. Why Caribou Thunder? TEAM THUNDER - Mission Focused. Delivery Proven. Ready to Serve. Employee Advocacy Mission Proven Global Reach Skilled Teams Modern Tools Empowering Culture Our engineers and innovators ensure capability from sea floor to space frontier - delivering on time, maintaining compliance, and performing with precision in high-consequence environments. We specialize in Engineering Services, Cybersecurity, Software Development, Modeling & Simulation, Digital Engineering, and Artificial Intelligence - disciplines powering the nation's most complex technical missions. Employee Advocacy + Benefits Our people are the heart of Caribou Thunder. We invest in their growth, flexibility, and well-being - knowing their success drives ours.

Apply for this position