Jobs and Careers
CF
USAF - Jr. Cybersecurity Analyst
cFocus Software IncorporatedEllsworth, SD, United Statesfull_timeVerifiedPosted 4 Aug 2026
About the role
cFocus Software seeks a Jr. Cybersecurity Analyst to join our program supporting the United States Air Force. This position is onsite with the onsite location being in Ellsworth, South Dakota. This position requires a TS/SCI SSBI clearance.
Qualifications:
Qualifications:
- Active TS/SCI SSBI clearance
- B.S. Computer Science, Information Technology, or a related field
- 10+ years of RMF/Cybersecurity experience
- Foundational experience or education in cybersecurity, information assurance, RMF, security compliance, information systems, or a closely related discipline.
- Working knowledge of the RMF and Assessment and Authorization lifecycle, including security controls, implementation evidence, risk assessment, authorization artifacts, and continuous monitoring.
- Ability to develop and maintain SSPs, RARs, POA&Ms, assessment findings, inventories, and related authorization documentation with senior guidance.
- Ability to learn and use eMASS and ITIPS and to maintain accurate data across multiple systems and recurring reporting cycles.
- Basic understanding of vulnerability assessment, risk analysis, remediation tracking, residual risk, and POA&M lifecycle management.
- Strong analytical, technical writing, documentation, quality-control, organization, and attention-to-detail skills.
- Ability to communicate professionally with system owners, security personnel, engineers, program offices, and Government stakeholders.
- Ability to manage multiple assignments and deadlines, protect sensitive information, and escalate discrepancies or risks promptly.
- One to three years of relevant cybersecurity, information assurance, compliance, vulnerability-management, audit, or federal IT experience; internships and military experience may be considered.
- A current credential satisfying the applicable IAM Level II and DoD 8140 722-Intermediate qualification requirements.
- Coursework or hands-on exposure to NIST SP 800-53, DoD RMF, eMASS, vulnerability scanning, POA&M tracking, control assessment, and technical documentation
- Support the full RMF lifecycle, including security control selection, implementation tracking, evidence collection, validation support, authorization, and continuous monitoring.
- Assist with interpretation of federal, DoD, and Air Force cybersecurity policies and help translate requirements into system-level implementation actions.
- Develop, update, organize, and maintain authorization artifacts for multiple systems, including SSPs, RARs, POA&Ms, control evidence, inventories, diagrams, and supporting records.
- Enter, validate, reconcile, and maintain cybersecurity and authorization data in eMASS and ITIPS.
- Review security-control implementation statements and evidence for completeness, consistency, currency, and traceability; identify gaps for senior review.
- Support vulnerability assessments, analyze findings, document risk information, and assist in developing practical mitigation and remediation strategies.
- Track vulnerabilities, POA&M milestones, overdue actions, closure evidence, authorization status, and ATO expiration dates across assigned systems.
- Coordinate with system owners, ISSOs, engineers, program offices, and other stakeholders to collect artifacts, clarify discrepancies, and advance remediation actions.
- Assist with security-control assessment findings reports that document gaps, weaknesses, risk levels, and recommended remediation strategies.
- Support preparation of A&A decision staff packages, including control summaries, risk analysis, mission-impact information, and recommendations for ATO, ATO with Conditions, or Denial.
- Help prepare POA&M status reports, escalation reports, FM systems inventory/boundary updates, cybersecurity policy and guidan
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s