CybersecurityJobs.io
← Back to all jobs
COLSA Corporation

Cybersecurity Analyst (MSIC)

COLSA Corporation
Huntsville, AL Full time Posted 3h ago
Cybersecurity Tools Information Security Information Technology (IT) InfoSec NIST SP 800-53 Risk Management Rmf Security Security Compliance Security Standards Security Testing Solution Architecture Stigs System Security Authorization Vulnerability Scan Assessment
Apply Now

Job Description

COLSA Corporation seeks Cybersecurity Analysts for a dual-role ISSE/ISSO assignment supporting design, integration, and formal authorization of complex DoD information systems to achieve and maintain an ATO.

Responsibilities

  • Integrate cybersecurity requirements into the System Development Life Cycle (SDLC); design and evaluate security architectures for alignment with NIST 800-53 and DoD Cyber-survivability requirements.
  • Lead the end-to-end Risk Management Framework (RMF) process, including system categorization, control selection, implementation, and continuous monitoring within approved software.
  • Author, maintain, and support a complete Security Authorization Package, including:
    • System Security Plan (SSP)
    • Security Assessment Report (SAR)
    • Risk Assessment Report (RAR)
    • Security Control Traceability Matrix (SCTM)
  • Apply Security Technical Implementation Guides (STIGs) and address Information Assurance Vulnerability Alerts (IAVA).
  • Conduct root-cause analysis on vulnerability scan results from ACAS/Nessus and develop mitigation strategies.
  • Perform formal risk assessments, document residual risks, and manage Plan of Action and Milestones (POA&M) to drive timely closure of findings.

Requirements

  • Associate’s degree in Cybersecurity, Information Technology, or a related field (or equivalent experience).
  • Minimum 0–12 years of related experience; level may vary based on education and experience.
  • Active baseline certification: CompTIA Security+ CE, ISC2 SSCP, or an equivalent certification.
  • Deep knowledge of NIST 800-53 security controls and technical implementation.
  • Demonstrated experience managing vulnerabilities in DoD environments.
  • Specialized experience authoring and reviewing high-stakes security artifacts, including:
    • System Security Plans (SSP)
    • Security Assessment Reports (SAR)
    • Security Control Traceability Matrices (SCTM)
  • Ability to communicate complex cybersecurity situations to non-technical leadership in an actionable format.
  • U.S. Citizenship required.
  • Must possess an active DoD Top Secret clearance with SCI eligibility.
  • Must successfully complete a Counterintelligence (CI) Polygraph within 180 days of hire and meet eligibility requirements for Special Access Programs (SAP).

Technologies

  • NIST 800-53
  • DoD Cyber-survivability requirements
  • System Development Life Cycle (SDLC)
  • Risk Management Framework (RMF)
  • ACAS, Nessus
  • STIGs
  • IAVA
  • SCCM
  • WMI
  • PowerShell
  • SCAP Compliance Checker (SCC)

Preferred Qualifications

  • Active DoD Top Secret clearance with SCI and a CI Polygraph, plus willingness to meet SAP eligibility requirements.
  • Active ISC2 CISSP.
  • Expertise using enterprise tools such as SCCM, WMI, and PowerShell to automate security patch and configuration deployments across workstations and servers.
  • Proficiency with ACAS (Nessus) and SCAP Compliance Checker (SCC) for vulnerability identification, root-cause analysis, and determining system applicability and risk.
  • System administration security experience is a plus.

Location: Huntsville, AL (on-site)

Position Type: Dual-role ISSE/ISSO supporting DoD RMF and ATO.

Similar Jobs