CybersecurityJobs.io
← Back to all jobs
Itility LLC

Cybersecurity Analyst/Information Assurance

Itility LLC
Tampa, FL Full time Posted 2h ago
Cloud Platforms Data Security Identity and Access Management Information Security InfoSec Microsoft 365 Security Risk Management Security Authorization Security Clearance Security Compliance Security Standards
Apply Now

Job Description

Build continuous compliance while supporting mission-critical Enterprise Knowledge Management (EKM) systems. This onsite role in Tampa, FL supports the Department of Defense by keeping solutions operating inside approved security boundaries and aligning technical delivery with the government authorization framework (ATO/RMF).

You will work directly across the technical team and the security authorization process to help maintain readiness through ongoing security reviews, vulnerability management, and STIG compliance work.

Responsibilities

  • Ensure that each system, application, platform, and data asset in the EKM program operates within an approved security boundary and maintains continuous compliance with DoD cybersecurity mandates.
  • Act as the bridge between the engineering and operations team building and running Enterprise Knowledge Management and the government security authorization framework.

Requirements

  • Active TS clearance
  • Five (5+) years supporting Risk Management Framework (RMF) per NIST SP 800-37 and DoDI 8510.01 in a DoD environment.
  • Three (3+) years supporting the full ATO lifecycle, including categorization, security control selection, implementation, assessment, authorization, and continuous monitoring.
  • Three (3+) years applying DISA Security Technical Implementation Guides (STIGs) across the Enterprise Knowledge Management technology stack: M365 (Exchange Online, SharePoint Online, Teams, OneDrive), Windows Server, SQL Server, Azure, Active Directory / Entra ID, IIS, .NET, and custom web applications.
  • Three (3+) years identifying STIG findings and remediating or documenting mitigations.
  • Three (3+) years supporting preparation for and remediation of findings from Command Cyber Readiness Inspection (CCRI), including vulnerability management, configuration management, IAVM compliance, account management, and physical security.
  • Three (3+) years running CCRI dry runs and conducting internal compliance reviews: vulnerability scan result reviews, STIG compliance validation, account reviews, privileged access audits, IAVM patch status checks, and documentation completeness.
  • Three (3+) years tracking, reporting, and managing CCRI remediation plan progress.
  • Three (3+) years tracking and enforcing Information Assurance Vulnerability Management (IAVM) directives to achieve and maintain 100% IAVM compliance (IAVAs, IAVBs, IAVMs).
  • Three (3+) years using Microsoft Defender for Office 365, Defender for Endpoint, Defender for Cloud Apps, and Microsoft Sentinel in GCC High / IL5-IL6, including security baseline configuration and attack simulation.
  • Two (2+) years writing comprehensive SSPs for enterprise-scale systems-of-systems, including DoD-formatted SSPs with complete control implementation narratives.
  • Two (2+) years producing monthly security status reports: CCRI readiness dashboards, IAVM compliance reports, POA&M aging reports, and executive risk summaries.
  • Certifications: CompTIA Security+, CySA+, GICSP, GSEC, and SSCP

Technologies

  • Risk Management Framework (RMF), NIST SP 800-37, DoDI 8510.01
  • DISA Security Technical Implementation Guides (STIGs), STIG compliance
  • M365 (Exchange Online, SharePoint Online, Teams, OneDrive), Windows Server, SQL Server, Azure
  • Active Directory / Entra ID, IIS, .NET, custom web applications
  • ATO lifecycle, SSPs
  • Command Cyber Readiness Inspection (CCRI), Information Assurance Vulnerability Management (IAVM), IAVA, IAVB, IAVM, POA&M
  • Microsoft Defender for Office 365, Defender for Endpoint, Defender for Cloud Apps, Microsoft Sentinel
  • GCC High, IL5-IL6

Work Environment

  • Ability to sit or stand for extended periods and perform computer-based work using standard office equipment.
  • Frequent verbal communication, active listening, and visual acuity to perform job responsibilities.
  • Must follow site-specific safety, security, and dress standards.

Similar Jobs