Information Security Analyst
About The Position
I2X Technologies is seeking an RMF Analyst to support ongoing customer activities in Colorado Springs, Colorado. The position is on-site and requires an active Top Secret/SCI clearance. The analyst supports and executes the Risk Management Framework (RMF) process across multiple enterprise systems and enclaves, maintaining system registrations, security baselines, and evidence in eMASS. The role carries ISSO-level ownership of continuous monitoring and Authority to Operate (ATO) sustainment, with responsibility for keeping systems’ cybersecurity posture current and audit-ready. The analyst evaluates system risk and security posture using vulnerability and compliance scan results, supports system categorization, and develops and validates security documentation. The role also coordinates remediation with technical stakeholders, advises system owners and leadership, and provides weekly status reports. The position requires U.S. citizenship and an active TS/SCI clearance.
Requirements
- Active Top Secret/SCI clearance.
- U.S. citizenship.
- DoDM 8140.03 Intermediate-level certification, such as CompTIA Security+ or an equivalent certification.
- Bachelor’s degree in information assurance, cybersecurity, or a related field and 3–5 years of relevant experience; or a high school diploma or equivalent and 7–10 years of relevant information assurance or cybersecurity experience.
- At least 2 years of direct experience as an ISSO or cybersecurity practitioner supporting DoD systems.
- Direct experience managing RMF lifecycle artifacts and end-to-end eMASS package management across multiple concurrent systems.
- Experience authoring, tracking, and coordinating technical remediation to bring POA&Ms to validated completion.
- Ability to work autonomously, self-direct work, and lead cross-functional technical teams through complex authorization lifecycles.
Nice To Haves
- Ability to work effectively in a team-focused, dynamic, high-tempo operational environment.
- Experience using STIG Viewer and automated compliance tools.
- Prior experience participating in Change Advisory Boards (CABs).
Responsibilities
- Support and execute the RMF process across multiple enterprise systems and enclaves, maintaining system registrations, security baselines, and evidentiary records in eMASS.
- Drive continuous monitoring and ATO sustainment with ISSO-level ownership.
- Maintain cybersecurity standards and operational hygiene to support a CORA-ready posture.
- Manage the cybersecurity posture of enterprise systems and identify mitigations aligned with DoD directives and instructions and NIST SP 800-53 requirements.
- Analyze and correlate ACAS, SCAP, and other approved tool results to evaluate risk and security posture and maintain ATO and Assess Only authorizations.
- Assist with system categorization under CNSSI 1253 as information types, mission profiles, and system interconnections evolve.
- Develop, maintain, and technically validate System Security Plans, ensuring evidence reflects current technical architectures and applicable STIGs are implemented.
- Manage POA&Ms by evaluating deficiencies, determining risk impacts, and coordinating with technical stakeholders to close findings on time.
- Collaborate with system administrators, network engineers, and leadership to remediate STIG findings, scan results, and architectural deficiencies.
- Provide cybersecurity guidance, risk assessments, and status updates to system owners and leadership.
- Prepare weekly status reports summarizing accomplishments, risk posture, issues, and paths forward.
- Create, refine, and enforce operational policies, procedures, and artifacts to ensure security controls are implemented and audit-ready.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
