What are the responsibilities and job description for the Security Analyst II position at ISSE Services?
Description
Security Analyst II
Annual pay range $75,000 to $85,000 (Non-Exempt, Hourly)
WE ARE A CONTRACTED FEDERAL DRUG-FREE WORKPLACE
All shifts available in 24/7 Operations Center
(Day, Swing, Grave)
About ISSE Services
ISSE Services is a cybersecurity and mission assurance company supporting defense, aerospace, and regulated industry customers. We specialize in Governance, Risk, and Compliance (GRC), cybersecurity engineering, managed security services, and CMMC readiness for organizations handling Controlled Unclassified Information (CUI).
Our mission is to help customers securely enable and accelerate their operations through practical compliance, technical expertise, and mission-focused security solutions.
About the Role
ISSE Services has vast experience maintaining the ATO and coordinating the Prime to ensure continued compliance with the RMF controls. The ATO control baseline (r5 and the SAF/CN control set) has recently been increased to a larger workload with more controls being required than in previous ATO cycles.
The Security Analyst II supports the Information System Security Manager (ISSM) by implementing and managing security controls in accordance with NIST RMF (SP 800-37) and applicable control baselines (e.g., NIST SP 800-53). The Security Analyst II ensures that system security requirements are met during system development, operation, and maintenance, and that risks are identified, documented, and mitigated.
The Security Analyst II is responsible for assisting the ISSM in maintaining RMF documentation such as the System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), Plan of Action and Milestones (POA&M), and continuous monitoring artifacts. They track vulnerabilities, ensure timely remediation, and coordinate with system administrators, engineers, and security teams to implement technical, administrative, and operational controls.
Key Responsibilities
Requirements
Required Qualifications
The ideal candidate must have CompTIA Security at least one of the following certifications: GMON, SecurityX / CASP , CCISO, CCSP, CGRC/CAP, CISSO, Cloud , GCSA, GSEC, SSCP
Nice to have but not required: CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, GSLC
Security Analyst II
Annual pay range $75,000 to $85,000 (Non-Exempt, Hourly)
WE ARE A CONTRACTED FEDERAL DRUG-FREE WORKPLACE
All shifts available in 24/7 Operations Center
(Day, Swing, Grave)
About ISSE Services
ISSE Services is a cybersecurity and mission assurance company supporting defense, aerospace, and regulated industry customers. We specialize in Governance, Risk, and Compliance (GRC), cybersecurity engineering, managed security services, and CMMC readiness for organizations handling Controlled Unclassified Information (CUI).
Our mission is to help customers securely enable and accelerate their operations through practical compliance, technical expertise, and mission-focused security solutions.
About the Role
ISSE Services has vast experience maintaining the ATO and coordinating the Prime to ensure continued compliance with the RMF controls. The ATO control baseline (r5 and the SAF/CN control set) has recently been increased to a larger workload with more controls being required than in previous ATO cycles.
The Security Analyst II supports the Information System Security Manager (ISSM) by implementing and managing security controls in accordance with NIST RMF (SP 800-37) and applicable control baselines (e.g., NIST SP 800-53). The Security Analyst II ensures that system security requirements are met during system development, operation, and maintenance, and that risks are identified, documented, and mitigated.
The Security Analyst II is responsible for assisting the ISSM in maintaining RMF documentation such as the System Security Plan (SSP), Security Assessment Plan (SAP), Security Assessment Report (SAR), Plan of Action and Milestones (POA&M), and continuous monitoring artifacts. They track vulnerabilities, ensure timely remediation, and coordinate with system administrators, engineers, and security teams to implement technical, administrative, and operational controls.
Key Responsibilities
- Implement and manage RMF 800-53r5 security controls for assigned information systems in coordination with ISSM
- Assist ISSM maintain RMF artifacts (SSP, POA&M, SAR, continuous monitoring reports)
- Support system authorization (ATO) and reauthorization activities
- Monitor system security posture and ensure compliance with policies and standards
- Coordinate vulnerability scanning, patching, and remediation efforts
- Support security audits, inspections, and assessments
- Ensure security incidents are reported and handled per policy
- Advise leadership on system risks and mitigation strategies
Requirements
Required Qualifications
- Education: Bachelor's degree in Cybersecurity, Computer Science, IT, or related field (or equivalent experience).
- Experience: 2-7 years in cybersecurity.
- Audit/Compliance experience.
- Practical System Administration experience.
- Soft Skills: Strong analytical skills, ability to work under pressure, excellent communication skills, and team leadership capabilities.
The ideal candidate must have CompTIA Security at least one of the following certifications: GMON, SecurityX / CASP , CCISO, CCSP, CGRC/CAP, CISSO, Cloud , GCSA, GSEC, SSCP
Nice to have but not required: CISM, CISSP, CISSP-ISSMP, FITSP-M, GCIA, GCIH, GICSP, GSLC
Salary : $75,000 - $85,000