Security Analyst II

ISSE Services is a cybersecurity and mission assurance company supporting defense, aerospace, and regulated industry customers. We specialize in Governance, Risk, and Compliance (GRC), cybersecurity engineering, managed security services, and CMMC readiness for organizations handling Controlled Unclassified Information (CUI).

Our mission is to help customers securely enable and accelerate their operations through practical compliance, technical expertise, and mission-focused security solutions.

About the Role

ISSE Services has vast experience maintaining the ATO and coordinating the Prime to ensure continued compliance with the RMF controls. The ATO control baseline (r5 and the SAF/CN control set) has recently been increased to a larger workload with more controls being required than in previous ATO cycles.

The Security Analyst II supports the Information System Security Manager (ISSM) by implementing and managing security controls in accordance with NIST RMF (SP 800-37) and applicable control baselines (e.g., NIST SP 800-53). The Security Analyst II ensures that system security requirements are met during system development, operation, and maintenance, and that risks are identified, documented, and mitigated.

The Security Analyst II is responsible for assisting the ISSM in maintaining RMF documentation such as the System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), Plan of Action and Milestones (POA&M), and continuous monitoring artifacts. They track vulnerabilities, ensure timely remediation, and coordinate with system administrators, engineers, and security teams to implement technical, administrative, and operational controls., * Implement and manage RMF 800-53r5 security controls for assigned information systems in coordination with ISSM

• Assist ISSM maintain RMF artifacts (SSP, POA&M, SAR, continuous monitoring reports)
• Support system authorization (ATO) and reauthorization activities
• Monitor system security posture and ensure compliance with policies and standards
• Coordinate vulnerability scanning, patching, and remediation efforts
• Support security audits, inspections, and assessments
• Ensure security incidents are reported and handled per policy
• Advise leadership on system risks and mitigation strategies

• Education: Bachelor’s degree in Cybersecurity, Computer Science, IT, or related field (or equivalent experience).
• Experience: 2-7 years in cybersecurity.
• Audit/Compliance experience.
• Practical System Administration experience.
• Soft Skills: Strong analytical skills, ability to work under pressure, excellent communication skills, and team leadership capabilities.

The ideal candidate must have CompTIA Security+ at least one of the following certifications: GMON, SecurityX / CASP+, CCISO, CCSP, CGRC/CAP, CISSO, Cloud+, GCSA, GSEC, SSCP

Nice to have but not required: CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, GSLC

Why You’ll Love It Here

• A mission-driven organization where your work directly supports federal programs that make a difference.

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision coverage, company paid life insurance, long-term and short-term disability plus 401(k) with company match.

• Generous PTO and 11 paid federal holidays.

• Professional development support, including an annual training and certification budget.

• A collaborative, respectful culture that values both precision and innovation.