> Markdown version of [/jobs/ext/4481949-journeyman-cybersecurity-analyst](https://www.wearedevelopers.com/jobs/ext/4481949-journeyman-cybersecurity-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Journeyman Cybersecurity Analyst

- **Company:** GovCIO
- **Location:** Arlington, VA, United States
- **Experience:** Expert
- **Salary:** $130,000.0
- **Contract:** Permanent contract
- **Skills:** Audit Trail, Cyber Security, Identity and Access Management, Security Content Automation Protocol, SC Clearance, Infrastructure Automation Frameworks, Nessus, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** October 26, 2026
- **Apply:** https://www.adzuna.com/details/5847663939

## About the Role

High School with 6 - 9 years (or commensurate experience), * Certifications: DoD 8570 IAT Level II or higher (e.g., Security+ CE, CySA+, or vendor-specific identity certifications).

 * Hands-on experience drafting, managing, and maintaining federal IA/ISSO artifacts within the NIST SP 800-37 RMF pipeline.
 * Proven track record tracking vulnerability tickets, managing POA&Ms, and driving technical remediation schedules.
 * Strong communication skills required to actively engage technical and non-technical stakeholders for security control implementation.

Clearance Required: Must have an active Secret clearance

Preferred Skills & Experience

 * Prior experience supporting U.S. Coast Guard (USCG) or Department of Homeland Security (DHS) identity management programs.
 * Familiarity with enterprise tools such as Enterprise Mission Assurance Support Service (eMASS) or Archer.
 * Direct experience interpreting ACAS/Nessus vulnerability scans and applying DISA STIGs..

## Description

The Journeyman Cybersecurity Analyst will serve as a key technical contributor for system security compliance and risk management. Core responsibilities include:

 * Support IA/ISSO artifacts by developing, updating, and maintaining Risk Management Framework (RMF) documentation, System Security Plans (SSP), and Security Assessment Reports (SAR).
 * Coordinate vulnerability tickets through tracking, prioritizing, and managing Plan of Action and Milestones (POA&M) items to closure.
 * Engage stakeholders for implementation of security controls, collaborating with system owners and engineers to resolve outstanding security findings.
 * Monitor compliance metrics across enterprise systems using automated vulnerability scanners and configuration management tools.
 * Assess system vulnerabilities by reviewing NessACAS scans, STIG checklists, and Security Content Automation Protocol (SCAP) results.
 * Facilitate continuous monitoring activities to ensure systems maintain their Authorization to Operate (ATO) status.
 * Analyze audit logs and security alerts to identify potential compliance gaps or unauthorized system modifications.
 * Draft technical reports and briefings regarding system risk posture for leadership and external authorization authorities.