cFocus Software seeks a Jr. Cybersecurity Analyst to join our program supporting the United States Air Force. This position is onsite with the onsite location being in Ellsworth, South Dakota. This position requires a TS/SCI SSBI clearance.
Qualifications:-
Active TS/SCI SSBI clearance
-
B.S. Computer Science, Information Technology, or a related field
-
10+ years of RMF/Cybersecurity experience
-
Foundational experience or education in cybersecurity, information assurance, RMF, security compliance, information systems, or a closely related discipline.
-
Working knowledge of the RMF and Assessment and Authorization lifecycle, including security controls, implementation evidence, risk assessment, authorization artifacts, and continuous monitoring.
-
Ability to develop and maintain SSPs, RARs, POA&Ms, assessment findings, inventories, and related authorization documentation with senior guidance.
-
Ability to learn and use eMASS and ITIPS and to maintain accurate data across multiple systems and recurring reporting cycles.
-
Basic understanding of vulnerability assessment, risk analysis, remediation tracking, residual risk, and POA&M lifecycle management.
-
Strong analytical, technical writing, documentation, quality-control, organization, and attention-to-detail skills.
-
Ability to communicate professionally with system owners, security personnel, engineers, program offices, and Government stakeholders.
-
Ability to manage multiple assignments and deadlines, protect sensitive information, and escalate discrepancies or risks promptly.
-
One to three years of relevant cybersecurity, information assurance, compliance, vulnerability-management, audit, or federal IT experience; internships and military experience may be considered.
-
A current credential satisfying the applicable IAM Level II and DoD 8140 722-Intermediate qualification requirements.
-
Coursework or hands-on exposure to NIST SP 800-53, DoD RMF, eMASS, vulnerability scanning, POA&M tracking, control assessment, and technical documentation
Duties:-
Support the full RMF lifecycle, including security control selection, implementation tracking, evidence collection, validation support, authorization, and continuous monitoring.
-
Assist with interpretation of federal, DoD, and Air Force cybersecurity policies and help translate requirements into system-level implementation actions.
-
Develop, update, organize, and maintain authorization artifacts for multiple systems, including SSPs, RARs, POA&Ms, control evidence, inventories, diagrams, and supporting records.
-
Enter, validate, reconcile, and maintain cybersecurity and authorization data in eMASS and ITIPS.
-
Review security-control implementation statements and evidence for completeness, consistency, currency, and traceability; identify gaps for senior review.
-
Support vulnerability assessments, analyze findings, document risk information, and assist in developing practical mitigation and remediation strategies.
-
Track vulnerabilities, POA&M milestones, overdue actions, closure evidence, authorization status, and ATO expiration dates across assigned systems.
-
Coordinate with system owners, ISSOs, engineers, program offices, and other stakeholders to collect artifacts, clarify discrepancies, and advance remediation actions.
-
Assist with security-control assessment findings reports that document gaps, weaknesses, risk levels, and recommended remediation strategies.
-
Support preparation of A&A decision staff packages, including control summaries, risk analysis, mission-impact information, and recommendations for ATO, ATO with Conditions, or Denial.
-
Help prepare POA&M status reports, escalation reports, FM systems inventory/boundary updates, cybersecurity policy and guidance updates, and leadership briefing materials.
-
Compile metrics and trend data for vulnerabilities, remediation progress, POA&M closure, artifact currency, authorization status, and other QASP-aligned measures.
-
Participate in status meetings, technical reviews, governance forums, and AO decision support activities; record actions and maintain supporting documentation.
-
Apply documentation governance, quality-control, naming, version-control, and records-management practices to all assigned work products.
-
Support COOP, contingency, incident, and mission-continuity activities when requested by the PMO.
hnP9GBxRuy
