> Markdown version of [/jobs/ext/3633084-journeyman-cybersecurity-analyst](https://www.wearedevelopers.com/jobs/ext/3633084-journeyman-cybersecurity-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Journeyman Cybersecurity Analyst

- **Company:** GovCIO
- **Location:** Fairfax County, VA, United States
- **Experience:** Expert
- **Salary:** $100,000.0 - $130,000.0
- **Contract:** Permanent contract
- **Skills:** Audit Trail, Cyber Security, Identity and Access Management, Information Security Management, Security Content Automation Protocol, Software Vulnerability Management, SC Clearance, Infrastructure Automation Frameworks, Nessus, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** October 8, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=54959d593f5f36bb

## About the Role

High School with 6 - 9 years (or commensurate experience), * Certifications: DoD 8570 IAT Level II or higher (e.g., Security+ CE, CySA+, or vendor-specific identity certifications).

 * Hands-on experience drafting, managing, and maintaining federal IA/ISSO artifacts within the NIST SP 800-37 RMF pipeline.
 * Proven track record tracking vulnerability tickets, managing POA&Ms, and driving technical remediation schedules.
 * Strong communication skills required to actively engage technical and non-technical stakeholders for security control implementation.

Clearance Required: Must have an active Secret clearance
Preferred Skills & Experience

 * Prior experience supporting U.S. Coast Guard (USCG) or Department of Homeland Security (DHS) identity management programs.
 * Familiarity with enterprise tools such as Enterprise Mission Assurance Support Service (eMASS) or Archer.
 * Direct experience interpreting ACAS/Nessus vulnerability scans and applying DISA STIGs..

## Description

The Journeyman Cybersecurity Analyst will serve as a key technical contributor for system security compliance and risk management. Core responsibilities include:

 * Support IA/ISSO artifacts by developing, updating, and maintaining Risk Management Framework (RMF) documentation, System Security Plans (SSP), and Security Assessment Reports (SAR).
 * Coordinate vulnerability tickets through tracking, prioritizing, and managing Plan of Action and Milestones (POA&M) items to closure.
 * Engage stakeholders for implementation of security controls, collaborating with system owners and engineers to resolve outstanding security findings.
 * Monitor compliance metrics across enterprise systems using automated vulnerability scanners and configuration management tools.
 * Assess system vulnerabilities by reviewing Nessus/ACAS scans, STIG checklists, and Security Content Automation Protocol (SCAP) results.
 * Facilitate continuous monitoring activities to ensure systems maintain their Authorization to Operate (ATO) status.
 * Analyze audit logs and security alerts to identify potential compliance gaps or unauthorized system modifications.
 * Draft technical reports and briefings regarding system risk posture for leadership and external authorization authorities.