Journeyman Cybersecurity Analyst

The Journeyman Cybersecurity Analyst will serve as a key technical contributor for system security compliance and risk management. Core responsibilities include:

• Support IA/ISSO artifacts by developing, updating, and maintaining Risk Management Framework (RMF) documentation, System Security Plans (SSP), and Security Assessment Reports (SAR).
• Coordinate vulnerability tickets through tracking, prioritizing, and managing Plan of Action and Milestones (POA&M) items to closure.
• Engage stakeholders for implementation of security controls, collaborating with system owners and engineers to resolve outstanding security findings.
• Monitor compliance metrics across enterprise systems using automated vulnerability scanners and configuration management tools.
• Assess system vulnerabilities by reviewing Nessus/ACAS scans, STIG checklists, and Security Content Automation Protocol (SCAP) results.
• Facilitate continuous monitoring activities to ensure systems maintain their Authorization to Operate (ATO) status.
• Analyze audit logs and security alerts to identify potential compliance gaps or unauthorized system modifications.
• Draft technical reports and briefings regarding system risk posture for leadership and external authorization authorities.

High School with 6 - 9 years (or commensurate experience), * Certifications: DoD 8570 IAT Level II or higher (e.g., Security+ CE, CySA+, or vendor-specific identity certifications).

• Hands-on experience drafting, managing, and maintaining federal IA/ISSO artifacts within the NIST SP 800-37 RMF pipeline.
• Proven track record tracking vulnerability tickets, managing POA&Ms, and driving technical remediation schedules.
• Strong communication skills required to actively engage technical and non-technical stakeholders for security control implementation.

Clearance Required: Must have an active Secret clearance Preferred Skills & Experience

• Prior experience supporting U.S. Coast Guard (USCG) or Department of Homeland Security (DHS) identity management programs.
• Familiarity with enterprise tools such as Enterprise Mission Assurance Support Service (eMASS) or Archer.
• Direct experience interpreting ACAS/Nessus vulnerability scans and applying DISA STIGs..

Posted Salary Range: USD $100,000.00 - USD $130,000.00 /Yr.