Cybersecurity Analyst

Overview

DecisionPoint is seeking a Cybersecurity Analyst to provide advanced cybersecurity operations, compliance management, and continuous monitoring support for a large-scale Department of Defense (DoD) enterprise environment. These positions play a critical role in sustaining cyber defense readiness, ensuring systems maintain RMF accreditation, STIG compliance, and continuous monitoring posture across IL2–IL5 environments. 

 

One analyst will focus on RMF/ATO documentation and Tier 3 operational support, while the other will concentrate on vulnerability management, audit log review, and patch compliance validation. Both roles support ongoing modernization and defense initiatives that enable secure, mission-ready operations. 

 

These positions are fully remote. 

Duties & Responsibilities

Cybersecurity Analyst – RMF/ATO Support & Tier 3 Operations: 

• Support the full Risk Management Framework (RMF) lifecycle, including control identification, tailoring, and evidence collection. 

• Develop, maintain, and validate Authorization to Operate (ATO) packages, ensuring all artifacts are current and traceable in eMASS. 

• Support security assessments and audits, ensuring system configurations meet DoD and DISA STIG/SRG baselines. 

• Coordinate Tier 3 cybersecurity support, analyzing incidents, escalating unresolved vulnerabilities, and applying mitigations. 

• Develop and update System Security Plans (SSPs), Security Assessment Reports (SARs), and Plan of Action and Milestones (POA&Ms). 

• Track vulnerability remediation status and report compliance metrics to leadership and system owners. 

• Assist in developing Continuous Monitoring Strategies and dashboards that align with DoD cybersecurity directives. 

• Participate in technical reviews to ensure security considerations are integrated into design and sustainment phases. 

• Collaborate with engineers, administrators, and auditors to close findings and maintain ATO compliance across IL environments. 

 Cybersecurity Analyst – Continuous Monitoring & Compliance: 

• Conduct continuous vulnerability scanning using Tenable ACAS, AWS Inspector, or equivalent tools, and validate remediation effectiveness. 

• Review and analyze audit logs for unauthorized activity, configuration drift, and potential security incidents. 

• Manage and track encryption key rotation, certificate renewals, and credential lifecycle to ensure data protection compliance. 

• Validate system and application patches to ensure proper deployment, configuration alignment, and functional stability. 

• Correlate scan and log data to identify patterns and potential risks across cloud and hybrid infrastructure. 

• Support incident response activities through forensics analysis and coordinated remediation actions. 

• Assist in maintaining SIEM dashboards, ensuring timely alerts and accurate risk categorization. 

• Generate reports summarizing vulnerabilities, patch compliance, and audit results for leadership and stakeholders. 

• Recommend and implement security automation enhancements to streamline scanning, alerting, and reporting functions. 

• Contribute to the Continuous Service Improvement (CSI) process by identifying recurring issues and suggesting mitigation strategies. 

Qualifications

Clearance Requirement: 

• Must hold an active Top Secret clearance. 

Education: 

• Bachelor’s degree in Cybersecurity, Information Systems, or a related technical field. 

Experience: 

• Minimum 5 years of experience in cybersecurity operations, compliance, or risk management within DoD or federal environments. 

• Hands-on experience with RMF/ATO processes, continuous monitoring, and vulnerability scanning tools. 

• Proven understanding of IL-classified cloud environments, compliance reporting, and control implementation. 

Technical Knowledge: 

• Strong knowledge of DoDI 8510.01 (RMF), NIST SP 800-53, and DISA STIG/SR