> Markdown version of [/jobs/ext/1931916-usaf-sr-cybersecurity-analyst](https://www.wearedevelopers.com/jobs/ext/1931916-usaf-sr-cybersecurity-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # USAF - Sr. Cybersecurity Analyst - **Company:** cFocus Software Incorporated - **Location:** Box Elder, SD, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Security, Information Systems, SAP Sales and Distribution, Information Technology, Software Version Control, Plan of Action and Milestones, Vulnerability Analysis - **Published:** August 5, 2026 - **Apply:** http://cfocussoftware.applytojob.com/apply/jobs/details/H2rNSLMjxc ## About the Role * Active TS/SCI SSBI clearance * B.S. Computer Science, Information Technology, or a related field * 10+ years of RMF/Cybersecurity experience * Advanced experience leading RMF, Assessment and Authorization, and continuous-monitoring activities for multiple federal or DoD information systems. * Expert knowledge of federal, DoD, and Air Force cybersecurity policy and the ability to convert policy into practical, system-level implementation guidance. * Demonstrated experience developing and evaluating SSPs, RARs, POA&Ms, security-control evidence, authorization decision packages, and mission-impact analyses. * Hands-on proficiency with eMASS and ITIPS or equivalent federal authorization and portfolio-governance systems. * Advanced vulnerability assessment, risk analysis, mitigation planning, remediation coordination, and trend-reporting experience. * Ability to assess security controls, determine control effectiveness, document weaknesses and residual risk, and recommend risk-informed courses of action. * Experience briefing senior leaders and supporting Authorizing Officials, AODRs, system owners, program offices, governance forums, and technical teams. * Strong technical writing, analytical, quality-control, stakeholder-management, and version-control skills. * Ability to manage simultaneous authorization actions and recurring deliverables while meeting PWS deadlines and maintaining artifact currency. * Ability to work primarily at Ellsworth AFB during the PWS duty-hour window and support rare work at Wright-Patterson AFB or a contractor facility when required. * Active DoD 8140 certification ## Description cFocus Software seeks a Sr. Cybersecurity Analyst to join our program supporting the United States Air Force. This position is onsite with the onsite location being in Ellsworth, South Dakota. This position requires a TS/SCI SSBI clearance., * Lead comprehensive Risk Management Framework lifecycle support across the DAF FM portfolio, including security control selection, implementation, validation, authorization, and continuous monitoring. * Provide expert advisory support to the FM Authorizing Official, AODR, and program offices on the compliant application of federal, DoD, and Air Force cybersecurity policy. * Analyze cybersecurity statutes, regulations, directives, standards, policies, and guidance and translate them into actionable implementation requirements for FM systems. * Develop, manage, review, and sustain authorization artifacts for multiple systems, including System Security Plans, Risk Assessment Reports, Plans of Action and Milestones, control evidence, and related records in eMASS and ITIPS. * Assess security controls; document gaps, weaknesses, associated risk levels, and recommended remediation strategies. * Conduct vulnerability assessments, perform technical and mission risk analysis, identify systemic issues, and design defensible mitigation strategies across the FM portfolio. * Coordinate vulnerability and POA&M remediation with system owners, cybersecurity personnel, engineers, and program management offices; validate closure evidence and residual risk. * Track and report enterprise-wide vulnerability trends, authorization status, ATO expiration dates, remediation progress, POA&M closure rates, overdue items, and escalation conditions. * Prepare complete, high-quality staffing packages for authorization decisions, including risk analysis, control summaries, mission impact, and recommendations for ATO, ATO with Conditions, or Denial. * Develop Mission Impact Assessments and presentation materials for AO decision meetings. * Facilitate communication among system owners, security personnel, program offices, and the FM AO to resolve information-assurance and authorization issues. * Prepare and deliver cybersecurity status updates, leadership briefings, annual program reviews, policy/guidance updates, and materials for governance forums and working groups. * Maintain the FM systems inventory and boundary documentation, including points of contact, authorization status, and ATO expiration information. * Support configuration, readiness, and technical reviews by evaluating cybersecurity risk, control implementation, change impacts, and production-readiness evidence. * Maintain accurate, current, version-controlled cybersecurity documentation and provide auditable evidence supporting QASP performance objectives. * Support COOP, contingency, incident, and other mission-continuity activities when requested by the PMO. ## Related Videos - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Microservices? Monoliths? An Annoying Discussion!](https://www.wearedevelopers.com/videos/970-microservices-monoliths-an-annoying-discussion) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)