Cybersecurity Analyst / ISSO

Spry Methods • Stafford, VA

12d

About The Position

This role requires a strategic understanding of how emerging technologies (like A.I.) and high-level USMC Cyber Directives impact the acquisition lifecycle and overall enterprise risk posture. Leading cybersecurity risk management efforts across enterprise systems by assessing AI and machine learning capabilities, overseeing RMF authorization activities, managing POA&M remediation strategies, and ensuring compliance with DoD cybersecurity directives and NIST standards. Responsibilities include evaluating system architectures through a zero-trust lens, interpreting and implementing Cyber Tasking Orders, validating security controls and STIG compliance, developing cybersecurity policies and continuous monitoring strategies, and providing technical leadership to maintain secure, mission-ready environments.

Requirements

• Experience assessing the risk of Artificial Intelligence (A.I.) and Machine Learning (ML) capabilities, including familiarity with emerging DoD A.I. security guidelines, data pipeline security, and assessing A.I. toolsets within the authorization boundary.
• Proven capability to interpret, analyze, and direct programmatic responses to MFCC (Marine Forces Cyber Command) and DCDC (Department of Defense Cyber Defense Command) TaskOrds, Cyber Tasking Orders (CTOs), and other organizational directives, policies, and messages governing cyber / IT.
• Expert-level creation, management, and strategic burn-down of complex Plan of Action and Milestones (POA&Ms) across multiple enterprise systems, ensuring alignment with USMC continuous monitoring timelines / requirements.
• Advanced understanding of Computer Network Defense (CND) architectures, including zero-trust principles, network boundary defense, and threat intelligence integration.
• Deep expertise navigating eMASS and leading systems through the complete Risk Management Framework (RMF) Assess and Authorize (A&A) lifecycles and workflows.
• Deep understanding of NIST SP 800-53 security controls, CNSSI 1253, NIST SP 800-161 & NIST SP 800-162, and DoDI 8510.01.
• Experience drafting organizational cybersecurity policies, Incident Response Plans, and Continuous Monitoring Strategies.
• Advanced proficiency using the DISA STIG Viewer, executing SCAP Compliance Checker (SCC), using eMASSter, and manually validating STIG/SRG requirements on diverse operating systems (Windows, Red Hat Linux, Cisco IOS, Cisco ASA).
• Expert level understanding of applying zero-trust methodologies to system design and tracking implementation throughout the system life-cycle.

Nice To Haves

• 4-8 years of progressive experience in DoD cybersecurity, information assurance, or Computer Network Defense (CND).
• Active Secret clearance
• DoD 8140/8570.01-M Baseline Certification: IAM Level II or III (e.g., CISSP, CISM, CAP/CGRC)
• CSSP Auditor/Manager baseline certification is highly recommended.

Responsibilities

• Leading cybersecurity risk management efforts across enterprise systems by assessing AI and machine learning capabilities.
• Overseeing RMF authorization activities.
• Managing POA&M remediation strategies.
• Ensuring compliance with DoD cybersecurity directives and NIST standards.
• Evaluating system architectures through a zero-trust lens.
• Interpreting and implementing Cyber Tasking Orders.
• Validating security controls and STIG compliance.
• Developing cybersecurity policies and continuous monitoring strategies.
• Providing technical leadership to maintain secure, mission-ready environments.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed