Overview

DecisionPointseeks a Cybersecurity Analyst to support cybersecurity compliance, RMF documentation, assessment activities, and continuous monitoring deliverables for enterprise systems supporting a federal and DoD-aligned mission environment. This role updates andmaintainscybersecurity documentation, supports security testing,validatescontrol implementations, andassistsin preparing audit and assessment packages.

The Cybersecurity Analyst works closely with ISSOs, engineers, and mission stakeholders to ensure that cybersecurity recordsremainaccurate, complete, and aligned with RMF, NIST, and DoD security requirements.

This position is fully remote.

Duties & Responsibilities

The Cybersecurity Analyst will:

• Update and maintain RMF documentation including SSPs, POA&Ms, SARs, RARs, and supporting artifacts.

• Conduct security control assessments andassistinvalidatingtechnical and procedural control implementations.

• Support continuous monitoring activities including evidence collection, log reviews, and vulnerability tracking.

• Assistin audits, assessments, and compliance reviews by preparing required documentation and evidence packages.

• Track POA&M items, remediation activities, and corrective action plans.

• Support security testing including vulnerability scanning, configuration reviews, and security validation tasks.

• Documentassessmentresults, risks, findings, and recommendations.

• Coordinate with cybersecurity engineers tovalidateremediation actions and ensureaccuratedocumentation.

• Assistwith reporting tasks including cybersecurity dashboards, compliance summaries, and control status updates.

• Maintain detailed cybersecurity records, configuration documentation, and assessment tracking logs.

• Participate in security meetings, assessment discussions, and technical coordination sessions.

• Provide support to ISSO and ISSM staff to maintain ATO and sustainment requirements.

Qualifications

Clearance Requirement

Must hold an active Top Secret clearance, supported by a Tier 5 background investigation.

Education (Required)

Bachelor27s degree in Information Technology, Cybersecurity, Information Assurance, ora relatedfield.

Experience (Required)

• Minimum5 yearsof experience in cybersecurity, RMF support, compliance, or information assurance.

• Experience updating SSPs, POA&Ms, SARs, and other cybersecurity documentation.

• Experience conducting or supporting security control assessments.

• Experience preparing audit evidence, compliance documentation, or security reporting.

• Experience supporting continuous monitoring tasks or vulnerability management workflows.

Technical Knowledge (Required)

• Knowledge of NIST SP 800-53, RMF processes, and DoD cybersecurity requirements.

• Familiarity with STIGs, patching requirements, and secure configuration baselines.

• Understanding ofvulnerability scanning,assessmentworkflows, and security testing techniques.

• Ability to document assessment results, remediation actions, and compliance artifacts clearly and accurately.

Technical Knowledge (Preferred)

• Experience witheMASSor other compliance tracking platforms.

• Familiarity with cloud security controls and cloud-based compliance requirements.

• Understanding ofZero Trust principles and cybersecurity modernization strategies.

Certifications

Required:

• Security+

Preferred:

• CAP

• CASP+

• CISSP

• Additionalcompliance or assessment-focused certifications

Skills

• Strong writing and documentation skills for producing high-quality cybersecurity materials.

• Strong analytical and problem-solving abilities for assessing control evidence andidentifyinggaps.

• Excellent organizational skills for managing documentation, tracking findings, and supporting assessments.

• Ability to collaborate effectively with cybersecurity teams, engineers, and PMO staff.

• High attention to detail and commitment to accuracy and compliance.