Cybersecurity RMF Analyst / ISSE - TS/SCI

We are seeking a motivated cybersecurity professional to support Risk Management Framework (RMF) activities and security accreditation for Department of Defense (DoD) systems. This is a hands-on opportunity to work with security controls, system hardening, compliance documentation, vulnerability remediation, and continuous monitoring across Linux and Windows environments. Candidates with a cybersecurity foundation, a willingness to learn, and an interest in supporting mission-critical systems are encouraged to apply. Opportunities to develop technical skills and expand knowledge of DoD security processes are available. What You’ll Do

• Support RMF activities throughout the system authorization lifecycle.
• Assist with developing and maintaining security documentation, including SSPs, SARs, and POA&Ms.
• Help apply and validate security configurations and DISA STIG requirements across Linux and Windows systems.
• Use command-line tools to review configurations, collect evidence, and support security assessments.
• Assist with vulnerability tracking, remediation, and continuous monitoring.
• Work with engineering and operations teams to identify and address security risks.
• Support compliance reviews, audits, and authorization activities.
• Learn and apply DoD cybersecurity policies, standards, and best practices.

• An active TS/SCI clearance.
• An interest in cybersecurity, information assurance, or systems security engineering.
• Foundational knowledge of Windows, Linux, or general IT systems.
• A willingness to learn DoD RMF processes, NIST security controls, and DISA STIG requirements.
• Strong problem-solving skills, attention to detail, and a collaborative mindset.
• Relevant cybersecurity education, certifications, or hands-on experience are beneficial.

Nice to Have

• CompTIA Security+, CISSP, or another relevant cybersecurity certification.
• Familiarity with RMF, NIST SP 800-53, eMASS, or security authorization documentation.
• Experience with Linux or Windows command-line tools.
• Exposure to vulnerability assessment tools such as ACAS/Nessus.
• Knowledge of AWS, GovCloud, the DoD Cloud Computing SRG, or FedRAMP.
• Basic scripting knowledge in Bash, PowerShell, or Python.