Cybersecurity Analyst (MSIC)

COLSA Corporation • Huntsville, AL

6d • Onsite

About The Position

COLSA Corporation is seeking multiple Cybersecurity Analysts for a dual-role position responsible for the design, integration, and formal authorization of complex DoD information systems. The role applies Information System Security Engineering (ISSE) principles to develop secure architectures while performing Information System Security Officer (ISSO) duties to ensure systems achieve and maintain an Authorization to Operate (ATO) under the current approved version of the Risk Management Framework (RMF). It requires a deep technical understanding of vulnerability remediation and the ability to translate policy into actionable engineering requirements. The position requires on-site work at MSIC in Huntsville, Alabama.

Requirements

• Deep technical understanding of vulnerability remediation.
• Ability to translate policy into actionable engineering requirements.
• The position requires on-site work at MSIC in Huntsville, Alabama.

Responsibilities

• Lead integration of cybersecurity requirements into the System Development Life Cycle (SDLC).
• Design and evaluate security architectures for compliance with NIST 800-53 and DoD cyber-survivability requirements.
• Manage the end-to-end RMF process, including system categorization, control selection, implementation, and continuous monitoring within approved software.
• Author and maintain a Security Authorization Package, including the System Security Plan (SSP), Security Assessment Report (SAR), Risk Assessment Report (RAR), and Security Control Traceability Matrix (SCTM).
• Direct application of Security Technical Implementation Guides (STIGs) and Information Assurance Vulnerability Alerts (IAVA).
• Perform root-cause analysis on ACAS/Nessus vulnerability scan results and develop mitigation strategies.
• Perform formal risk assessments, document residual risks, and manage the Plan of Action and Milestones (POA&M) to ensure timely closure of findings.
• Perform ISSO duties to help ensure systems achieve and maintain an Authorization to Operate (ATO).

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed