The Role
Perform advanced vulnerability assessments and risk analyses for DAF FM systems; develop mitigation recommendations; coordinate remediation; analyze enterprise vulnerability trends; support security-control assessments and authorization packages; create and maintain RMF artifacts in eMASS and ITIPS; prepare POA&M and status reports; support policy updates, leadership briefings, incident-related risk analysis, and review junior analysts' work.
Summary Generated by Built In
We are a growing information technology company that offers its employees a culture of success, the chance to work on revolutionary federal IT infrastructure, and the opportunity to grow alongside cutting-edge technology that is reshaping the industry. We are seeking forward thinking candidates that have strong experience in operational support and can help take to the next level in a pro-active stance.
Chameleon Integrated Services has expertise in operations management, quality systems, data operations and cybersecurity. We secure some of the most sensitive data for the Department of Defense and for other U. S. federal government agencies. We are known for the great care we take with clients and employees, and we believe in promoting from within.
We offer a Full Benefits package including:
- Competitive Employee Health Insurance options including dental
- 100% company paid vision plan
- 401K plan with generous company match and no vesting period
- 100% company paid Life insurance
- 100% company paid long and short-term disability insurance
- Training allowance
- PTO and more
SENIOR CYBERSECURITY ANALYST
Position mission: Perform advanced vulnerability, risk assessment, reporting, and authorization-support work across the DAF FM system portfolio.
Duties:
- Conduct vulnerability assessments and risk analyses.
- Develop mitigation recommendations based on system risk and mission impact.
- Coordinate remediation with system owners and program offices.
- Analyze enterprise vulnerability trends and remediation status.
- Support security-control assessments and document findings.
- Prepare risk analyses, control summaries, and authorization-package content.
- Develop and maintain RMF artifacts in eMASS and ITIPS.
- Prepare POA&M status, escalation, and trend reports.
- Support cybersecurity policy and guidance updates.
- Prepare leadership briefings and participate in governance sessions.
- Support incident-related risk analysis when cybersecurity findings affect authorization posture.
- Review work produced by junior analysts for factual accuracy and traceability.
MANDATORY PROGRAM COMPLIANCE (DoD 8570 / DoD 8140)
To be eligible for technical review and corporate submittal to the Air Force Contracting Officer, candidates MUST meet the requirements of OPTION A or OPTION B below. Applications failing to demonstrate at least one pathway will be automatically archived.
- OPTION A (8570):
Candidate must hold ONE active, verifiable commercial certification from the approved DoD 8570/8140 IAM Level III list below. Please include your certification number and expiration date directly on your resume draft:- CISSP (or Associate) – Certified Information Systems Security Professional
- CISM – Certified Information Security Manager
- GSLC – GIAC Security Leadership Certification
- CCISO – Certified Chief Information Security Officer
- OPTION B (8140):
Candidate must hold a relevant leadership or technical degree (Master’s or Bachelor’s degree in Technology Management, Information Technology, Cybersecurity, Computer Science, or Business Administration/Project Management) AND demonstrate documented, hands-on professional experience managing Integrated Master Schedules (IMS), risk registers, or coordinating technical synchronization across multiple complex IT engineering and cybersecurity workstreams.
- Multi-system vulnerability or cybersecurity-risk analysis.
- Security-control assessment findings and remediation planning.
- eMASS and ITIPS use.
- POA&M trend and escalation reporting.
- Authorization-decision or reauthorization support.
- Written risk recommendations presented to senior Government stakeholders.
- Experience converting technical findings into mission-impact or authorization implications.
Anticipated start: September 28, 2026
Primary work location: Ellsworth AFB, South Dakota. Occasional work at Wright-Patterson AFB, Ohio.
Work schedule: An eight-hour shift scheduled between 6:00 a.m. and 6:00 p.m. Mountain Time, Monday through Friday. The team must collectively provide overlapping coverage during that window. COOP support may be required, but work will remain within a 40-hour workweek unless the Contracting Officer authorizes otherwise.
Project Length: Up to 4.5 years
Skills Required
- DoD 8570 IAM Level III certification
- DoD 8140 work role 722-Advanced certification
- Experience conducting vulnerability assessments and risk analyses
- Experience developing mitigation recommendations and coordinating remediation with system owners
- Experience supporting security-control assessments and preparing authorization-package content
- Experience creating and maintaining RMF artifacts in eMASS and ITIPS
- Experience preparing POA&M status, escalation, and trend reports
- Ability to prepare leadership briefings and participate in governance sessions
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Chameleon Integrated Services is an information technology company offering requirements management services.
