USAF - Jr. Cybersecurity Analyst

Develop, update, organize, and maintain authorization artifacts for multiple systems, including SSPs, RARs, POA&Ms, control evidence, inventories, diagrams, and supporting records. Coursework or hands-on exposure to NIST SP 800-53, DoD RMF, eMASS, vulnerability scanning, POA&M tracking, control assessment, and technical documentation.

cFocus Software seeks a Jr. Cybersecurity Analyst to join our program supporting the United States Air Force. This position is onsite with the onsite location being in Ellsworth, South Dakota. This position requires a TS/SCI SSBI clearance.Qualifications:

• Active TS/SCI SSBI clearance
• B.S. Computer Science, Information Technology, or a related field
• 10+ years of RMF/Cybersecurity experience
• Foundational experience or education in cybersecurity, information assurance, RMF, security compliance, information systems, or a closely related discipline.
• Working knowledge of the RMF and Assessment and Authorization lifecycle, including security controls, implementation evidence, risk assessment, authorization artifacts, and continuous monitoring.
• Ability to develop and maintain SSPs, RARs, POA&Ms, assessment findings, inventories, and related authorization documentation with senior guidance.
• Ability to learn and use eMASS and ITIPS and to maintain accurate data across multiple systems and recurring reporting cycles.
• Basic understanding of vulnerability assessment, risk analysis, remediation tracking, residual risk, and POA&M lifecycle management.
• Strong analytical, technical writing, documentation, quality-control, organization, and attention-to-detail skills.
• Ability to communicate professionally with system owners, security personnel, engineers, program offices, and Government stakeholders.
• Ability to manage multiple assignments and deadlines, protect sensitive information, and escalate discrepancies or risks promptly.
• One to three years of relevant cybersecurity, information assurance, compliance, vulnerability-management, audit, or federal IT experience; internships and military experience may be considered.
• A current credential satisfying the applicable IAM Level II and DoD 8140 722-Intermediate qualification requirements.
• Coursework or hands-on exposure to NIST SP 800-53, DoD RMF, eMASS, vulnerability scanning, POA&M tracking, control assessment, and technical documentation

Duties:

• Support the full RMF lifecycle, including security control selection, implementation tracking, evidence collection, validation support, authorization, and continuous monitoring.
• Assist with interpretation of federal, DoD, and Air Force cybersecurity policies and help translate requirements into system-level implementation actions.
• Develop, update, organize, and maintain authorization artifacts for multiple systems, including SSPs, RARs, POA&Ms, control evidence, inventories, diagrams, and supporting records.
• Enter, validate, reconcile, and maintain cybersecurity and authorization data in eMASS and ITIPS.
• Review security-control implementation statements and evidence for completeness, consistency, currency, and traceability; identify gaps for senior review.
• Support vulnerability assessments, analyze findings, document risk information, and assist in developing practical mitigation and remediation strategies.
• Track vulnerabilities, POA&M milestones, overdue actions, closure evidence, authorization status, and ATO expiration dates across assigned systems.
• Coordinate with system owners, ISSOs, engineers, program offices, and other stakeholders to collect artifacts, clarify discrepancies, and advance remediation actions.
• Assist with security-control assessment findings reports that document gaps, weaknesses, risk levels, and recommended remediation strategies.
• Support preparation of A&A decision staff packages, including control summaries, risk analysis, mission-impact information, and recommendations for ATO, ATO with Conditions, or Denial.
• Help prepare POA&M status reports, escalation reports, FM systems inventory/boundary updates, cybersecurity policy and guidance updates, and leadership briefing materials.
• Compile metrics and trend data for vulnerabilities, remediation progress, POA&M closure, artifact currency, authorization status, and other QASP-aligned measures.
• Participate in status meetings, technical reviews, governance forums, and AO decision support activities; record actions and maintain supporting documentation.
• Apply documentation governance, quality-control, naming, version-control, and records-management practices to all assigned work products.
• Support COOP, contingency, incident, and mission-continuity activities when requested by the PMO.

Powered by JazzHR