Cybersecurity Analyst/Information Assurance

ITility, LLC • Tampa, FL

10h

About The Position

ITility is seeking a Cybersecurity Analyst/Information Assurance professional to support the Department of Defense mission, with a focus on knowledge management, information sharing, collaboration, data, business processes, and digital capabilities. The role supports an upcoming program.

The Cybersecurity Analyst/Information Assurance (TS) serves as the bridge between the technical team that builds and operates Enterprise Knowledge Management (EKM) and the government’s security authorization framework. The role ensures that systems, applications, platforms, and data assets within the EKM program operate within approved security boundaries and maintain continuous compliance with DoD cybersecurity mandates.

Requirements

• Active TS clearance.
• Five or more years supporting RMF per NIST SP 800-37 and DoDI 8510.01 in a DoD environment.
• Three or more years supporting the full ATO lifecycle: categorization, security control selection, implementation, assessment, authorization, and continuous monitoring.
• Three or more years applying DISA STIGs across M365 (Exchange Online, SharePoint Online, Teams, OneDrive), Windows Server, SQL Server, Azure, Active Directory/Entra ID, IIS, .NET, and custom web applications.
• Three or more years identifying STIG findings and remediating or documenting mitigations.
• Three or more years preparing for, supporting, and remediating CCRI findings involving vulnerability management, configuration management, IAVM compliance, account management, and physical security.
• Three or more years running CCRI dry runs and internal compliance reviews, including audits of vulnerability scan results, STIG compliance, account reviews, privileged access audits, IAVM patch status, and documentation completeness.
• Three or more years tracking, reporting, and managing CCRI remediation plan progress.
• Three or more years tracking and enforcing IAVM directives, including IAVAs, IAVBs, and IAVMs, to achieve and maintain 100% compliance.
• Three or more years using Microsoft Defender for Office 365, Defender for Endpoint, Defender for Cloud Apps, and Microsoft Sentinel in GCC High/IL5-IL6, including security baseline configuration and attack simulation.
• Two or more years writing comprehensive SSPs for enterprise-scale systems-of-systems, including DoD-formatted SSPs with complete control implementation narratives.
• Two or more years producing monthly security status reports, CCRI readiness dashboards, IAVM compliance reports, POA&M aging reports, and executive risk summaries.
• CompTIA Security+ certification.
• CySA+ certification.
• GICSP certification.
• GSEC certification.
• SSCP certification.

Responsibilities

• Ensure systems, applications, platforms, and data assets within the EKM program operate within approved security boundaries and maintain continuous compliance with DoD cybersecurity mandates.
• Support the Risk Management Framework (RMF) and the full authorization to operate (ATO) lifecycle.
• Apply DISA Security Technical Implementation Guides (STIGs), identify findings, and remediate them or document mitigations.
• Prepare for Command Cyber Readiness Inspections (CCRI), support remediation findings, and conduct internal compliance reviews and dry runs.
• Track, report, and manage CCRI remediation plan progress.
• Track and enforce Information Assurance Vulnerability Management (IAVM) directives and maintain IAVM compliance.
• Prepare system security plans, security status reports, readiness dashboards, compliance reports, POA&M aging reports, and executive risk summaries.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed