> Markdown version of [/jobs/ext/3062221-cybersecurity-analyst-rmf-isso](https://www.wearedevelopers.com/jobs/ext/3062221-cybersecurity-analyst-rmf-isso). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Analyst / RMF (ISSO)

- **Company:** People, Technology & Processes
- **Location:** Aberdeen Proving Ground, MD, United States
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Desktop Computing, Microsoft Office, Security Content Automation Protocol, Software Vulnerability Management, Network Access Control, SC Clearance, 3-tier Architectures
- **Published:** September 25, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9192001/cybersecurity-analyst-rmf-isso

## About the Role

* High school diploma or equivalent (minimum)

 * U.S. citizenship

 * Ability to speak, read, write, and understand English proficiently

 * Proficiency with computers and Microsoft Office software

 * Active Secret clearance; Top Secret / SCI eligibility (Tier 5 / T5R) required for critical- or special-sensitive cybersecurity duties

 * DoD 8140 / 8570.01-M baseline certification appropriate to the assigned work role and level, held prior to performance, with the required computing environment (CE) certification obtained within six (6) months of appointment.

 * OPSEC Level II certification required for the designated OPSEC Coordinator

## Description

Clearance required : Secret minimum (Tier 3 / T3R); Top Secret / SCI eligible (Tier 5 / T5R) required to administer classified systems or networks or for critical- or special-sensitive duties.

Scope of Work: Executes the enterprise cybersecurity program, maintaining continuous Authority to Operate for multiple ATEC systems through the Risk Management Framework and eMASS, and performing security operations and vulnerability management.

Responsibilities include (but are not limited to):

 * Execute RMF tasks to achieve and maintain continuous ATO without lapse for designated ATEC systems

 * Create and maintain policies, procedures, diagrams, hardware and software listings, and all ATO package artifacts

 * Manage eMASS packages, POA&Ms, and control assessments and submit renewal packages no less than six months before expiration

 * Perform security operations with 15-minute critical and 1-hour high incident response, remediating Critical/High vulnerabilities within 30 days

 * Run ACAS and SCAP scans, manage endpoint security and network access control, and support the DoD Cybersecurity Hygiene Scorecard


## Related Videos

- [Coffee with Developers - Scott Chacon on growing GitButler and the future of version control](https://www.wearedevelopers.com/videos/914-coffee-with-developers-scott-chacon-on-growing-gitbutler-and-the-future-of-version-control)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)