Information Analyst

Delta Solutions & Strategies•Pentagon, DC

2d•Onsite

About The Position

Delta Solutions & Strategies is seeking a full-time Information Analyst to support Headquarters United States Space Force (HQ USSF) S6 Cyber Governance and ATO/RMF initiatives at the Pentagon in Washington, DC. The position provides Advisory and Assistance Services to HQ USSF components, including the Chief of Space Operations, Chief Human Capital Office, Deputy Chief of Space Operations for Cyber and Data (S6), and associated directorates. The Information Analyst supports Security Control Assessor (SCA) activities for designated USSF systems, including independent security-control assessments, development and review of Risk Management Framework (RMF) documentation, eMASS artifact validation, and advice to Authorizing Official representatives on authorization readiness. The role also supports continuous monitoring, security authorization boundaries, system categorization, and integration of DevSecOps and AI/ML assurance evidence into RMF processes. The analyst collaborates with Air Force and Space Force organizations remotely and in person, and mentors junior analysts.

Requirements

Bachelor’s degree and at least 2 years of experience in cybersecurity, RMF compliance, or control assessment.
Familiarity with DoDI 8510.01, AFMAN 17-1303, and USSF RMF procedures for SCA roles.
Experience conducting control assessments at multiple classification levels (IL2–IL6, up to TS/SCI).
Experience authoring SAPs, SARs, and POA&Ms in eMASS.
DoD 8140/8570 baseline IA certification, such as CAP, CASP+, CISSP, or CISM, at IAM-II or IASAE-I level.
TS/SCI clearance required; Top Secret clearance with SCI eligibility is acceptable.

Nice To Haves

Master’s degree.
Prior experience supporting Authorizing Official and SCA functions within DoD Components or Combatant Commands.
Proficiency with eMASS, ACAS, Nessus, STIG Viewer, XACTA, and other compliance tools.
Understanding of Zero Trust principles and architectures.
Knowledge of cross-domain solutions, boundary protection mechanisms, and secure data transfer protocols.
Understanding of space systems cybersecurity, DevSecOps, and mission resilience.
Excellent communication, analytical, and problem-solving skills.
Commitment to supporting the USSF mission and strengthening national security through effective cyber governance.

Responsibilities

Serve as a Security Control Assessor or SCA-support lead for designated USSF systems, independently assessing implemented security controls and providing Security Assessment Reports and recommendations to the Authorizing Official.
Lead development and review of RMF documentation, including Security Assessment Plans, Security Assessment Reports, Risk Assessment Reports, and Plans of Action and Milestones.
Evaluate compliance with NIST SP 800-53, CNSSI 1253, DoDI 8510.01, and USSF RMF governance, and verify eMASS artifacts for accuracy and completeness.
Coordinate with Information System Security Officers, Information System Security Managers, and System Owners to track corrective actions through closure and reflect them in POA&Ms.
Advise S6G Authorizing Official Designated Representatives on system readiness for ATO, re-authorization, or continuous monitoring.
Support Security Authorization Boundary development, system categorization per ITCSC, and selection of Space, Privacy, and Mission-Specific overlays.
Contribute to Continuous Monitoring strategy and risk dashboards aligned with the DoD CIO Cybersecurity Risk Management Construct (Sep 2025).
Mentor junior analysts in control assessment methodology, artifact generation, and eMASS data entry.
Review and validate security documentation, including System Security Plans, SARs, and POA&Ms.
Conduct information-system assessments to ensure compliance with RMF, NIST, and DoD standards.
Integrate DevSecOps pipeline security controls and AI/ML assurance activities into RMF evidence collection to support rapid or continuous ATO processes.
Interface remotely and in person with Air Force and Space Force organizations to advance cybersecurity, policy, and infrastructure readiness.