Journeyman Cybersecurity Analyst

GovCIO is currently hiring a Journeyman Cybersecurity Analyst to support Information Assurance (IA) and Information System Security Officer (ISSO) activities for the U.S. Coast Guard (USCG). This technical role focuses on maintaining cybersecurity posture, managing vulnerability remediation, and developing critical compliance artifacts across enterprise architectures. This position will be located in Alexandria, VA, and will be a hybrid position.

The Journeyman Cybersecurity Analyst will serve as a key technical contributor for system security compliance and risk management. Core responsibilities include:

• Support IA/ISSO artifacts by developing, updating, and maintaining Risk Management Framework (RMF) documentation, System Security Plans (SSP), and Security Assessment Reports (SAR).
• Coordinate vulnerability tickets through tracking, prioritizing, and managing Plan of Action and Milestones (POA&M) items to closure.
• Engage stakeholders for implementation of security controls, collaborating with system owners and engineers to resolve outstanding security findings.
• Monitor compliance metrics across enterprise systems using automated vulnerability scanners and configuration management tools.
• Assess system vulnerabilities by reviewing Nessus/ACAS scans, STIG checklists, and Security Content Automation Protocol (SCAP) results.
• Facilitate continuous monitoring activities to ensure systems maintain their Authorization to Operate (ATO) status.
• Analyze audit logs and security alerts to identify potential compliance gaps or unauthorized system modifications.
• Draft technical reports and briefings regarding system risk posture for leadership and external authorization authorities.

High School with 6 - 9 years (or commensurate experience)

Required Skills & Experience

• Certifications: DoD 8570 IAT Level II or higher (e.g., Security+ CE, CySA+, or vendor-specific identity certifications).
• Hands-on experience drafting, managing, and maintaining federal IA/ISSO artifacts within the NIST SP 800-37 RMF pipeline.
• Proven track record tracking vulnerability tickets, managing POA&Ms, and driving technical remediation schedules.
• Strong communication skills required to actively engage technical and non-technical stakeholders for security control implementation.

Clearance Level: Must have an active Secret clearance  

Preferred Skills & Experience

• Prior experience supporting U.S. Coast Guard (USCG) or Department of Homeland Security (DHS) identity management programs.
• Familiarity with enterprise tools such as Enterprise Mission Assurance Support Service (eMASS) or Archer.
• Direct experience interpreting ACAS/Nessus vulnerability scans and applying DISA STIGs..