Cybersecurity Analyst

About the role

YSI is seeking a Cybersecurity Analyst to support federal systems by driving security compliance and vulnerability management. In this role, you will manage the complete lifecycle of Risk Management Framework (RMF) packages, execute continuous monitoring, and ensure systems meet rigorous security standards.

Responsibilities

• Guide security packages through all six steps of the NIST Risk Management Framework—from initial categorization and security control implementation through continuous monitoring.
• System Security Plans (SSPs), Risk Assessment Reports (RARs), Security Assessment Plans (SAPs), and Plan of Action and Milestones (POA&Ms).
• Perform routine vulnerability scans using tools like ACAS (Tenable) or HBSS/McAfee; track, triage, and remediate findings to reduce organizational risk.
• Audit, and validate DISA Security Technical Implementation Guides (STIGs) across servers, workstations, and network infrastructure.
• Maintain up-to-date compliance tracking, hardware/software baselines, and artifact uploads using the Enterprise Mission Assurance Support Service (eMASS).
• Utilize tools such as STIGMan, LanSweeper, SCAP, and SIEM platforms to support incident response, configuration management, and daily security posture assessments.

Requirements

• Experience with the NIST Risk Management Framework (RMF); practical experience moving a system/RMF package through all steps from categorization to continuous monitoring.
• Experience creating/updating System Security Plans (SSP), Risk Assessment Reports (RAR), and Security Assessment Plans (SAP).
• Practical knowledge of implementing and auditing DISA Security Technical Implementation Guides (STIGs) on servers, workstations, and network devices.
• Hands-on experience with tools such as ACAS, eMASS, STIGMan, LanSweeper, SCAP, and SIEM platforms.
• Bachelor’s degree in Cybersecurity, IT, Computer Science, or a related discipline; equivalent professional experience will also be considered.
• At least 3 years in relevant areas such as vulnerability management, RMF Implementation, software certification, SIEM, incident response, and configuration/change management.
• CompTIA Security+.
• Active Top Secret clearance required.
• US Citizen or Green card holder only.

Benefits

• 401(k)
• Health, dental, and vision insurance
• Life insurance
• Short-term and long-term disability insurance
• Paid time off
• Training and professional development assistance

Pay

Salary Range: $90,000-100,000 Annually with benefits