Information Analyst

Team: S6

Location: Pentagon, DC

Commitment: Full Time - Exempt

Workplace Type: onsite

What you will be doing:

• Serve as Security Control Assessor (SCA) or SCA-support lead for designated USSF systems, conducting independent assessment of implemented security controls and providing documents such as Security Assessment Reports (SARs) and recommendations to the Authorizing Official (AO).
• Lead development and review of RMF documentation, including the Security Assessment Plan (SAP), SAR, Risk Assessment Report (RAR), and Plan of Action and Milestones (POA&M).
• Evaluate compliance with NIST SP 800-53, CNSSI 1253, DoDI 8510.01, and USSF RMF governance, verifying eMASS artifacts for accuracy and completeness.
• Coordinate with Information System Security Officers (ISSOs), Information System Security Managers (ISSMs), and System Owners to ensure corrective actions are tracked to closure and reflected in POA&Ms.
• Advise S6G Authorizing Official Designated Representatives (AODRs) on system readiness for ATO, re-authorization, or continuous monitoring phases.
• Support Security Authorization Boundary development, system categorization (per ITCSC), and overlay selection (Space, Privacy, Mission-Specific).
• Contribute to Continuous Monitoring (CONMON) strategy and risk dashboards in alignment with the DoD CIO Cybersecurity Risk Management Construct (Sep 2025).
• Mentor junior analysts (e.g., SCA Support Analysts) in control assessment methodology, artifact generation, and eMASS data entry to build internal SCA bench strength.
• Review and validate security documentation, including System Security Plans (SSPs), SARs, and POA&Ms.
• Conduct assessments of information systems to ensure compliance with RMF, NIST, and DoD standards.
• Integrate DevSecOps pipeline security controls and AI/ML assurance activities into RMF evidence collection to support rapid or continuous ATO (cATO) processes.
• Interface remotely and in person with Air Force and Space Force organizations to advance cybersecurity, policy, and infrastructure readiness.

What you will need:

• Bachelor’s Degree (Master’s preferred) plus a minimum of 2 years of experience in cybersecurity, RMF compliance, or control assessment.
• Familiarity with DoDI 8510.01, AFMAN 17-1303, and USSF RMF procedures for SCA roles.
• Experience conducting control assessments at multiple classification levels (IL2–IL6, up to TS/SCI).
• Experiencing authoring SAPs, SARs, and POA&Ms in eMASS.
• Possession of DoD 8140/8570 baseline IA certification (e.g., CAP, CASP+, CISSP, or CISM) at IAM-II or IASAE-I level.
• TS/SCI required; Top Secret clearance with SCI eligibility acceptable.

Desired Skills and Experience:

• Prior experience supporting Authorizing Official (AO) and SCA functions within DoD Components or Combatant Commands.
• Proficiency with eMASS, ACAS, Nessus, STIG Viewer, XACTA, and other compliance tools.
• Understanding of Zero Trust principles and architectures.
• Knowledge of cross-domain solutions, boundary protection mechanisms, and secure data transfer protocols.
• Understanding of space systems cybersecurity, DevSecOps, and mission resilience.
• Excellent communication, analytical, and problem-solving skills.
• Commitment to supporting the USSF mission and strengthening national security through effective cyber governance.