Senior Cybersecurity Analyst / RMF Lead

We are a growing information technology company that offers its employees a culture of success, the chance to work on revolutionary federal IT infrastructure, and the opportunity to grow alongside cutting-edge technology that is reshaping the industry. We are seeking forward thinking candidates that have strong experience in operational support and can help take to the next level in a pro-active stance.

 
Chameleon Integrated Services has expertise in operations management, quality systems, data operations and cybersecurity.  We secure some of the most sensitive data for the Department of Defense and for other U. S. federal government agencies.  We are known for the great care we take with clients and employees, and we believe in promoting from within.

 

 
We offer a Full Benefits package including:

• Competitive Employee Health Insurance options including dental
• 100% company paid vision plan
• 401K plan with generous company match and no vesting period
• 100% company paid Life insurance
• 100% company paid long and short-term disability insurance
• Training allowance
• PTO and more

SENIOR CYBERSECURITY ANALYST / RMF LEAD

Position mission: Lead the hands-on development, review, and maintenance of RMF and authorization work products across the DAF FM system portfolio.

Duties:

• Lead RMF activities from control selection through authorization and continuous monitoring.
• Develop and maintain SSPs, RARs, POA&Ms, control implementation records, and supporting evidence.
• Maintain authorization information in eMASS and ITIPS.
• Review security-control assessment results and develop risk-based remediation recommendations.
• Conduct vulnerability assessments and risk analyses.
• Coordinate vulnerability remediation with system owners and program offices.
• Analyze vulnerability and POA&M trends across multiple systems.
• Prepare complete AO decision staff packages containing risk analysis, control summaries, mission impact, and a formal authorization recommendation.
• Prepare monthly POA&M status reports and high-risk escalation reports.
• Maintain FM system inventories, boundaries, authorization status, points of contact, and ATO expiration data.
• Brief leadership and participate in governance forums.
• Review subordinate RMF work products for accuracy, traceability, and readiness for Government review.

MANDATORY COMPLIANCE REQUIREMENT (DoD 8570/8140):
To be considered for this role, candidates must meet ONE of the following qualification pathways:

• DoD 5870 IAM Level III: Hold an active high-tier management certification ( CISSP, CISM, or GSLC ). OR
• Dod 8140 Work Role 722-Advanced: Hold a relevant degree (Master's or Bachelor's in Cybersecurity, IT, or Computer Science) combined with documented on-the-job experience performing RMF, eMASS, or cybersecurity governance activities

Requirements:

• Direct authorship or lead review of authorization packages.
• eMASS and ITIPS entries personally developed or maintained.
• Examples of ATO, conditional ATO, reauthorization, or denial recommendations.
• SSP, RAR, POA&M, assessment, and continuous-monitoring experience.
• Multi-system vulnerability and remediation tracking.
• Technical interpretation of federal, DoD, or Air Force cybersecurity policy.
• Leadership briefings and formal risk recommendations.
• Coordination with system owners, engineers, assessors, and authorization officials.

Anticipated start: September 28, 2026

Primary work location: Ellsworth AFB, South Dakota. Occasional work at Wright-Patterson AFB, Ohio.

Work schedule: An eight-hour shift scheduled between 6:00 a.m. and 6:00 p.m. Mountain Time, Monday through Friday. The team must collectively provide overlapping coverage during that window. COOP support may be required, but work will remain within a 40-hour workweek unless the Contracting Officer authorizes otherwise.

Project Length: Up to 4.5 years

 

“We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability or protected veteran status”

Texting Privacy Policy

• Message type: Informational; you will receive text messages regarding your application and potentially regarding interview scheduling.
• No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.
• Message frequency will vary depending on the application process.Msg & data rates may apply.
• OPT out at any time by texting "Stop".