Cybersecurity Analyst

Innovative Technologies Corporation is hiring two onsite Cybersecurity Analysts to support the Defense Health Agency (DHA) Medical Simulation and Training Program Management Office (MST PMO) in Orlando, Florida. The positions contribute to Risk Management Framework (RMF) and authorization documentation, vulnerability management activities, cybersecurity engineering support, and continuous compliance efforts across the MST PMO system portfolio.

Onsite Location

• Orlando, FL (onsite)
• Orlando, FL 32826 (required)

Salary and Compensation

• $68,000–$75,000 annually
• Final compensation will be determined based on relevant experience, qualifications, specialized expertise, and alignment with the position requirements.

Key Responsibilities

• Support Certification and Accreditation and Assessment and Authorization activities using the DoD Risk Management Framework (RMF), including initial authorization, FISMA-related compliance, and reauthorization requirements.
• Assist cybersecurity engineering efforts by integrating security characteristics and requirements into system performance objectives and certification or test activities.
• Prepare, review, coordinate, and maintain RMF and NIST security documentation, including Security Plans, Continuity of Operations Plans, Configuration Management Plans, and Plans of Action and Milestones (POA&Ms), along with related A&A artifacts.
• Coordinate with Authorizing Official organizations and Government cybersecurity stakeholders to support system authorization and accreditation decisions.
• Provide IAVM support, including vulnerability-alert dissemination, compliance tracking and reporting, and coordination with ISSMs, ISSOs, System Administrators, and other cybersecurity personnel.
• Support configuration management for information-system software and hardware, including evaluating security impact from system and network changes.
• Conduct self-assessments, validate results, and create or update POA&Ms in eMASS to support Control Approval Chain and Package Approval Chain activities.
• Conduct or support vulnerability scans and assess STIG checklist compliance.
• Review DoD, Army, RMF, and NIST documentation and security artifacts to assess system cybersecurity posture.
• Compile and analyze assessment results, document findings in eMASS, and provide validation recommendations supporting IATT and ATO decisions.
• Support continuous monitoring of cybersecurity posture, including accreditation boundaries, audit or log requirements, authentication policies, and known vulnerabilities.

Required Qualifications

• Bachelor’s degree
• 10+ years of relevant professional experience in cybersecurity, information assurance, information systems security, RMF/A&A, cybersecurity engineering, or a closely related field
• Current IAT Level II certification in accordance with DoD 8570.01-M requirements
• Demonstrated experience with DoD RMF and system authorization or accreditation activities
• Experience preparing or maintaining RMF/A&A artifacts, such as Security Plans, POA&Ms, configuration-management documentation, risk assessments, and supporting evidence
• Experience with eMASS or comparable Government cybersecurity authorization or compliance systems
• Experience with vulnerability assessment, STIG compliance, and cybersecurity control validation
• Strong analytical, documentation, communication, and stakeholder-coordination skills
• Ability to satisfy applicable DHA personnel-security, credentialing, facility-access, CAC, and system-access requirements
• Language: English (required)

Preferred Qualifications

• Previous DHA, Department of Defense, Army, or Federal cybersecurity experience
• Direct experience supporting DHA systems or DHA RMF/A&A activities
• Hands-on experience with NIST SP 800-53, eMASS, POA&M management, IAVM/IAVA processes, STIGs, ACAS, Nessus, SCAP, IAVA, or comparable vulnerability tools
• Experience supporting ISSM, ISSO, security-engineering, or system-security responsibilities in a DoD program office
• Experience supporting IATT/ATO packages and Authorizing Official coordination
• Current or recent DHA/DoD credentials or system access
• License/Certification: IAT Level II (preferred)

Technology and Tools

• DoD Risk Management Framework (RMF)
• eMASS
• NIST SP 800-53
• IAVM
• STIG
• ACAS
• Nessus
• SCAP
• IAVA
• POA&M
• DoD 8570.01-M

Benefits

• 401(k)
• 401(k) matching
• Dental insurance
• Employee assistance program
• Employee discount
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Professional development assistance
• Referral program
• Tuition reimbursement
• Vision insurance

Education and Experience

• Education: Bachelor’s (required)
• Experience: DoD Cybersecurity: 5 years (required)