Senior Cybersecurity Analyst (RMF/ISSO Lead)

COLSA Corporation•Huntsville, AL

1d•Onsite

About The Position

COLSA Corporation is seeking a Senior Cybersecurity Analyst to support a U.S. Army contract. This position is on-site at Redstone Arsenal in Huntsville, Alabama. The selected candidate will serve as an Information Systems Security Officer (ISSO), oversee Risk Management Framework (RMF) activities, and support the Authorization to Operate (ATO) process for multiple information systems, including enclaves and major applications across classified and unclassified networks. The role also provides technical guidance and supervision to an existing team of cybersecurity analysts and coordinates with system and network administrators and government engineering teams. The position supports continuous monitoring, vulnerability management, and security compliance activities. It manages RMF Assessment and Authorization activities and maintains system security documentation and authorization artifacts in eMASS. The analyst assesses and monitors security controls, conducts security assessments and vulnerability audits, analyzes findings using cybersecurity tools, and helps resolve security issues and incidents. The role also supervises assigned cybersecurity analysts and prepares team status reports.

Responsibilities

Manage RMF Assessment and Authorization (A&A) activities, including developing, maintaining, and submitting authorization packages in accordance with DoD and Army cybersecurity requirements.
Maintain and update system security documentation and authorization artifacts in eMASS, including System Security Plans (SSPs), security architectures, hardware and software inventories, Plans of Action and Milestones (POA&Ms), and risk acceptance memoranda.
Implement, assess, and monitor security controls to maintain compliance with applicable cybersecurity requirements and support ongoing authorization activities.
Develop and maintain security-focused configuration management plans and support Information System Owners in fulfilling Information Security Continuous Monitoring (ISCM) responsibilities.
Conduct security assessments, vulnerability audits, configuration reviews, and security impact analyses to identify and mitigate cybersecurity risks.
Monitor compliance with DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs).
Analyze security findings and monitoring data using cybersecurity tools.
Collaborate with system and network administrators and government engineering teams to troubleshoot security issues, remediate vulnerabilities, and resolve cybersecurity incidents.
Identify deviations from approved system configurations, security baselines, and applicable policies, and recommend corrective actions.
Support implementation and troubleshooting of security software and recommend ways to strengthen system and network security.
Prepare technical documentation, reports, and recommendations to support RMF authorization decisions and ongoing security compliance.
Develop cybersecurity training materials and provide technical guidance and mentoring to team members.
Supervise assigned COLSA cybersecurity analysts, including managing work assignments, schedules, timekeeping, performance evaluations, and professional development.
Prepare and provide weekly and monthly team status reports.
Perform other duties as assigned.