> Markdown version of [/jobs/ext/3376912-senior-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/3376912-senior-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Information Security Analyst

- **Company:** Omitron, Inc
- **Location:** Colorado Springs, CO, United States
- **Experience:** Expert
- **Salary:** $140,000.0 - $170,000.0
- **Contract:** Permanent contract
- **Skills:** Systems Engineering, Cyber Security, Data Security, SAP (Applications), Software Vulnerability Management, Data Processing, Information Technology, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** September 2, 2026
- **Apply:** https://www.careerjet.com/jobad/us8e0fffaf8612bd6f1250778161b60736

## About the Role

* US Citizenship required.
 * Security Clearance: Active TS/SCI required; SAP eligibility required or must be attainable.
 * Education: Bachelor's degree in Cybersecurity, Computer Science, Information Assurance, or a related field.
 * Experience: 8 to 10 or more years of cybersecurity/RMF experience, including senior-level responsibility for ATO/ATC packages on classified DoD or IC systems.
 * Certification: DoD 8570/8140-compliant certification (e.g., CISSP) required.
 * Demonstrated experience with ACAS/Tenable.sc scanning, STIG compliance validation, and POA&M management in multi-classification domain environments.
 * Periodic travel is required.

Preferred Qualifications

 * Education: Master's degree in Cybersecurity, Computer Science, Information Assurance, or a related field.
 * Direct experience supporting Space Domain Awareness (SDA) systems, U.S. Space Force, or Intelligence Community mission environments.
 * Experience authoring or maintaining body-of-evidence documentation for an RMF ATO package from initial submission through reauthorization.
 * Experience briefing ATO/ATC status and POA&M resolution directly to Government Authorizing Officials or their representatives.
 * Additional DoD 8570/8140 certifications (e.g., CISM, CAP, Security+ CE).
 * Familiarity with cross-domain solution (CDS) security requirements in a multi-classification environment.

## Description

Omitron is seeking a Senior Information Security Analyst to manage the Authorization to Operate (ATO) and Authorization to Connect (ATC) posture, continuous monitoring program, and Plan of Action and Milestones (POA&M) resolution for a secure data processing and distribution enclave (Red LAN) used to receive and distribute Space Domain Awareness (SDA) data. The enclave spans multiple classification levels, and this role owns the cybersecurity posture across all of them. This is a senior cybersecurity position combining hands-on Risk Management Framework (RMF) execution with the judgment to identify and resolve risks to the ATO/ATC schedule before they affect mission operations.
***This position is contingent on contract award***
Responsibilities As an Information Security Analyst, you are accountable for:
Cybersecurity Program Management

 * Implement a cybersecurity process to plan, organize, and manage activities to achieve security of the system.
 * Manage the cybersecurity program to proactively identify and mitigate risks to ATO/ATC schedules.
 * Identify process efficiencies and innovative methodologies to resolve RMF and POA&M challenges.

Authorization to Operate and Authorization to Connect

 * Obtain and sustain the Red LAN system ATO in accordance with RMF requirements under DoDI 8500.01 and DoDI 8510.01, and applicable system security requirements.
 * Develop, maintain, and deliver required body-of-evidence documentation supporting the ATO/ATC package.

Continuous Monitoring and Vulnerability Management

 * Implement a strategy for vulnerability scanning, continuous monitoring (ConMon), benchmarking, and corrective actions across the system.
 * Deliver quarterly continuous monitoring status reports.
 * Execute the vulnerability and flaw remediation strategy and deliver patching results and historical metrics to the Program Management Office (PMO).

POA&M and Compliance Reporting

 * Deliver updated POA&Ms to the PMO quarterly, including findings from vulnerability scans and DISA STIG compliance scans., * Reports to: Program Manager, Red LAN.
 * Collaborates with: Systems Engineering Lead (SEIT Lead), Computer Information Systems Manager/Transition Lead, and site leads.
 * Customer Interface: Government Authorizing Officials, PMO, and other cybersecurity stakeholders.

Schedule and Environment

 * On-site at a secured, classified facility; specific site(s) to be confirmed at award.
 * Supports a system requiring continuous data processing and distribution; may require support outside standard hours for scan windows, patch cycles, or ATO/POA&M deadlines.
 * Periodic travel required to support Government meetings and site visits.