Cyber Analyst

Concept Plus, LLC

. Lead and maintain the full RMF/ATO lifecycle .

Posted 9/25/2026full-timeRemote • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in managing the Risk Management Framework (RMF) and Authorization to Operate (ATO) lifecycle, ensuring compliance with NIST 800-53 and DoD cybersecurity policies. Proficient in vulnerability assessment and remediation, with strong communication skills to collaborate effectively with technical teams and stakeholders.

Highest-signal resume keywords

Risk Management Framework (RMF)Authorization to Operate (ATO)NIST 800-53 ComplianceVulnerability Scanning and RemediationDoD Secret Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity Risk AssessmentSecurity Authorization Packages ManagementContinuous Monitoring ArtifactsCloud Security ComplianceEMASS OperationAgile/DevSecOps IntegrationSecurity Engineering SupportAPI Security ReinforcementDocumentation SkillsIncident Response Coordination

Soft Skills

Excellent Verbal CommunicationExcellent Written CommunicationAbility to Work Independently

Tools & Technologies

NessusEMASSSonarQubeCheckmarxTrivyDependency Track

Certifications & Qualifications

Active DoD Secret ClearanceBachelor’s Degree in IT Related Field

Industry Keywords

DoD EnvironmentGovernment ContractingCybersecurity PoliciesDISA STIGsCloud Environment

Tech Stack

Tools & technologies

CloudCyber Security

About the role

Key responsibilities & impact

Lead and maintain the full RMF/ATO lifecycle
Manage security authorization packages and update SSPs, POA&Ms, risk assessments, and continuous monitoring artifacts
Ensure system confidentiality, integrity, and availability through compliance with NIST 800-53, DoDI 8500.01, DoDI 8510.01, and related DoD cybersecurity policies
Support Agile/DevSecOps deployments by integrating cybersecurity requirements into sprints, CI/CD pipelines, release schedules, and system design reviews
Perform vulnerability scanning, assessment, and remediation using Nessus, eMASS, SonarQube, Checkmarx, Trivy, and Dependency Track
Ensure compliance with DISA STIGs and cloud security baselines
Provide security engineering support, including secure architecture input, SSO/SSL integration, secure configuration guidance, and API/cloud security reinforcement
Collaborate with technical teams, ISSMs, and AO representatives on audits, inspections, security reviews, and risk mitigation
Track, report, and respond to cybersecurity incidents, coordinating recovery actions
Develop and maintain ISAs, MOAs, SoD matrices, architecture diagrams, and application/database security artifacts
Monitor project progress and deliver cybersecurity reports and risk insights to leadership and government stakeholders
Communicate with internal teams, customers, and stakeholders

Requirements

What you’ll need

US Citizen
Active DoD Secret Clearance (or ability to obtain one)
Bachelor’s Degree in an IT related field
8+ years of experience as Cyber Analyst
5+ years’ experience with ATO procurement in Cloud Environment
5+ years in DoD Environment
5+ years’ experience with the Risk Management Framework Process
5+ years’ experience operating the Enterprise Mission Assurance Support Service Application (eMASS)
DOD/Government contracting experience preferred
Government IT systems experience preferred
Ability to work independently and report to a blended Cyber Team ISSM
Good documentation skills
Excellent verbal and written communication skills

Benefits

Comp & perks

Competitive pay
Comprehensive health insurance
Dental insurance
Vision insurance
Paid life insurance
Paid time off
11 paid holidays
Performance bonuses
Tuition reimbursement
Unlimited training
Collaborative, flexible, and innovative work environment