Cybersecurity Analyst

DecisionPoint seeks a Cybersecurity Analyst to support cybersecurity compliance, RMF documentation, assessment activities, and continuous monitoring deliverables for enterprise systems supporting a federal and DoD-aligned mission environment. This role updates and maintains cybersecurity documentation, supports security testing, validates control implementations, and assists in preparing audit and assessment packages.

The Cybersecurity Analyst works closely with ISSOs, engineers, and mission stakeholders to ensure that cybersecurity records remain accurate, complete, and aligned with RMF, NIST, and DoD security requirements.

This position is fully remote., The Cybersecurity Analyst will: Update and maintain RMF documentation including SSPs, POA&Ms, SARs, RARs, and supporting artifacts.

• Conduct security control assessments and assist in validating technical and procedural control implementations.

• Support continuous monitoring activities including evidence collection, log reviews, and vulnerability tracking.

• Assist in audits, assessments, and compliance reviews by preparing required documentation and evidence packages.

• Track POA&M items, remediation activities, and corrective action plans.

• Support security testing including vulnerability scanning, configuration reviews, and security validation tasks.

• Document assessment results, risks, findings, and recommendations.

• Coordinate with cybersecurity engineers to validate remediation actions and ensure accurate documentation.

• Assist with reporting tasks including cybersecurity dashboards, compliance summaries, and control status updates.

• Maintain detailed cybersecurity records, configuration documentation, and assessment tracking logs.

• Participate in security meetings, assessment discussions, and technical coordination sessions.

• Provide support to ISSO and ISSM staff to maintain ATO and sustainment requirements.

Bachelor’s degree in Information Technology, Cybersecurity, Information Assurance, or a related field.

Experience (Required)

• Minimum 5 years of experience in cybersecurity, RMF support, compliance, or information assurance.

• Experience updating SSPs, POA&Ms, SARs, and other cybersecurity documentation.

• Experience conducting or supporting security control assessments.

• Experience preparing audit evidence, compliance documentation, or security reporting.

• Experience supporting continuous monitoring tasks or vulnerability management workflows.

Technical Knowledge (Required)

• Knowledge of NIST SP 800-53, RMF processes, and DoD cybersecurity requirements.

• Familiarity with STIGs, patching requirements, and secure configuration baselines.

• Understanding of vulnerability scanning, assessment workflows, and security testing techniques.

• Ability to document assessment results, remediation actions, and compliance artifacts clearly and accurately.

Technical Knowledge (Preferred)

• Experience with eMASS or other compliance tracking platforms.

• Familiarity with cloud security controls and cloud-based compliance requirements.

• Understanding of Zero Trust principles and cybersecurity modernization strategies.

Certifications

Required:

• Security+

Preferred:

• CAP

• CASP+

• CISSP

• Additional compliance or assessment-focused certifications

Skills

• Strong writing and documentation skills for producing high-quality cybersecurity materials.

• Strong analytical and problem-solving abilities for assessing control evidence and identifying gaps.

• Excellent organizational skills for managing documentation, tracking findings, and supporting assessments.

• Ability to collaborate effectively with cybersecurity teams, engineers, and PMO staff.

• High attention to detail and commitment to accuracy and compliance.