Senior Cybersecurity Assessment and Authorization (A&A) Analyst

Position Overview Type: Full-Time, Exempt

Location: Huntsville, AL

Travel: Some travel expected

Clearance: Active Department of Defense (DoD) Top Secret Security Clearance with SCI eligibility.

Work Authorization: U.S. Citizenship required

Summary/Objective

Five Stones Research Corporation (5SRC) is seeking energetic candidates to join our established and growing Huntsville-headquartered team.

Essential Functions

• Applies knowledge of Cyber policy, procedures, and workforce structure to develop, implement, and maintain a cyber-secure environment.


• Relies on extensive experience and judgment to plan and accomplish enclave security related goals.


• Supervises IAM and IAT personnel - Reports to government managers for enclave operational requirements.


• Leads cyber management and operations for enclave(s) / systems / sites.


• Leads and manages full RMF lifecycle activities in accordance with NIST SP 800‑37, NIST SP 800‑53, DoDI 8510.01, and DoD component policies.


• Develops, updates, and maintains all A&A documentation, including SSPs, SCTMs, POA&Ms, continuous monitoring plans, and audit‑ready artifacts.


• Prepares systems for initial ATO, ATO renewals, interim authorizations, and continuous monitoring requirements.


• Manages and maintains eMASS packages, ensuring accurate, timely, and compliant submissions.


• Conducts assessments and validations of security controls, analyzing vulnerability results (ACAS, SCAP) and tracking remediation efforts.


• Drafts and maintains cybersecurity SOPs, ISAs, and governance documentation to support secure system operation and external connections.


• Ensures compliance with FISMA, DoD cybersecurity policies, and organizational directives through ongoing evaluation and exercises.


• Identifies threats, vulnerabilities, and risk impacts; develops, manages, and monitors mitigation actions and POA&M entries.


• Provides expert cybersecurity guidance to leadership, system owners, engineers, AOs, SCAs, ISSMs, and other stakeholders.


• Supports audits and enterprise cybersecurity governance by compiling, editing, and coordinating policies, strategies, and operational guidance.

Required Education and Experience

• Education: Master’s in STEM / Program Management / or Cyber-related field or equivalent from an accredited institution with 5 years of cyber management experience
  
  
  
  • Acceptable alternative: Bachelor's Degree in STEM / Program Management / Cyber-related field with 8years DoD cyber experience and knowledge demonstrated in cyber and missile defense related or other complex, large DoD programs / projects
  
  


• IAM III Certification prior to accepting position - no exceptions


• eMASS Certification prior to accepting position - no exceptions

What We Offer:

• 401(k) Matching


• Company Events


• Dental Insurance


• Employee Recognition Programs


• Health Insurance


• Life Insurance


• Paid Time Off


• Parental Leave


• Performance Incentives


• Student Loan Repayment


• Tuition Reimbursement


• Vision Insurance

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.