Cybersecurity Analyst - ISSM- Tinker AFB, OK

<h3>Position Description & Qualifications</h3><br><p><span style="font-family: tahoma, arial, helvetica, sans-serif;">Serco is seeking an <strong>Cybersecurity Analyst /</strong> <strong>Information System Security Manager (ISSM) </strong>supporting the 76th Software Maintenance Group at Tinker AFB, OK. The ISSM will serve as the senior security authority and Cybersecurity SME for assigned information systems, ensuring compliance with DoD Cybersecurity requirements, managing system ATO, and guiding technical teams in the protection of classified environments.</span></p><p><span style="font-family: tahoma, arial, helvetica, sans-serif;">In this role, you will:</span></p><ul><li><span style="font-family: tahoma, arial, helvetica, sans-serif;">Lead the implementation, management, and enforcement of DoD, Air Force, and NIST Cybersecurity policies.</span></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">Responsible for updating all documentation from NIST 800-53 r4 to NIST 800-53 r5</span></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">Serve as the primary authority for RMF lifecycle activities including categorization, control selection, validation, continuous monitoring, and ATO package submission.</span></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">Manage and maintain system security documentation including SSPs, SCTMs, POA&Ms, Incident Response Plans, and Contingency Plans within eMASS.</span></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">Conduct cybersecurity inspections, audits, and compliance reviews.</span></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">Provide expert guidance to system owners, administrators, and engineers.</span></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">Oversee vulnerability and patch management activities including ACAS scans, system alerts, and patch mitigations.</span></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">Work with Configuration Management to help direct change processes and security impact analyses.</span></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">Monitor security posture across hybrid Windows and Linux environments.</span></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">Ensure continuity with incident response, backup and recovery response.</span></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">Team player | Provide technical cybersecurity mentorship to team members</span></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">Act as the primary Cybersecurity liaison to government stakeholders and leadership.</span></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">Provide oversight and direction to administrators, engineers, and technicians.</span></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">Present system status, vulnerabilities, and POA&M progress.</span></li></ul><p style="font-family: tahoma, arial, helvetica, sans-serif;"> </p><p><span style="font-family: tahoma, arial, helvetica, sans-serif;">To be successful in this role, you will have: </span></p><ul><li style="font-family: tahoma, arial, helvetica, sans-serif;">An active DoD Top Secret security clearance with SCI eligibility.</li><li style="font-family: tahoma, arial, helvetica, sans-serif;">SAP/SAR eligibilty.</li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">A Bachelor's degree and 8 </span><span style="font-family: tahoma, arial, helvetica, sans-serif;">years of Cybersecurity experience (or equivalent).</span><ul><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">OR an Associate's degree and 10 years of Cybersecurity experience.</span></li></ul></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">DoD 8570 IAM Level III certification (CISSP, CISM, GSLC, etc.) or DoD 8140 Cybersecurity ISSM - Intermediate qualifications </span></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><p style="margin: 0.0in; font-size: 12.0pt; font-family: Aptos, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">Active CAPM certification or obtain within 12 months of hire</span></p></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">RMF ATO Process experience.</span></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">Experience in mixed Windows/Linux enterprise environments.</span></li><li style="font-family: tahoma, arial, helvetica, sans-serif;"><span style="font-family: tahoma, arial, helvetica, sans-serif;">The ability to travel up to 10%.</span></li></ul><p><span style="font-family: tahoma, arial, helvetica, sans-serif;">Additional desired experience and skills:</span></p><ul><li>ISSM/ISSO experience with PaaS or shared-service offering.</li><li>Hands-on experience securing cloud environments such as Microsoft Azure commercial and/or Azure Gov.</li><li>Experience authorizing hybrid architectures spanning commercial and/or gov cloud and on-premises infrastructure, including boundary definition and interconnection documentation for hybrid systems.</li><li>Working knowledge of container platforms such as Kubernetes, and container image hardening, scanning, and registry governance.</li><li>Experience applying RMF to CI/CD pipelines, including control assessment of pipeline components, build integrity, artifact provenance, and automated gate enforcement.</li><li>Familiarity with Infrastructure as Code (IaC) and Configuration as Code (CaC), such as Terraform, ARM/Bicep, and Ansible, including how IaC affects configuration management, baseline drift, and change control under an existing authorization.</li><li>Understanding of how to sustain an authorization boundary under Continuous Integration and Continuous Delivery (CI/CD), including control inheritance, security impact analysis at deployment velocity, and evidence generation as a pipeline artifact rather than a manual collection effort.</li><li>Experience supporting systems operating at multiple classification levels, including management of separate authorization boundaries and data handling requirements across levels.</li><li>Familiarity with Cross Domain Solutions (CDS), NCDSMO, and data transfer flow validation.</li><li>Hands-on experience operating and managing ACAS/Tenable, including scan configuration, credentialed scanning, and false-positive adjudication.</li><li>Practical experience with SCAP/STIG workflow to include benchmark selection, STIG Viewer/Evaluate-STIG checklist production, and translating findings into POA&M entries.</li><li>Proficiency in eMASS, including package build, control response authoring, artifact management and workflow submission.</li><li>Experience with supply chain risk management (SCRM) as applied to software dependencies, third-party libraries, and container base images (SBOM familiarity ideal).</li><li>Working knowledge of ITAR/export control requirements and their impact on personnel access, data residency, and administrative access to cloud environments</li><li>Proficiency with Atlassian Suite toolset (Jira, Confluence, Bitbucket).</li><li>Familiarity with Agile development methodologies (Scrum, Kanban, etc..), including experience decomposing security and compliance requirements into user stories, participating in sprint events, and embedding security acceptance criteria into defined task completions.</li></ul><br><h3>Company Overview</h3> <br> <p>Serco Inc. (Serco) is the Americas division of Serco Group, plc. In North America, Serco’s 9,000+ employees strive to make an impact every day across 100+ sites in the areas of Defense, Citizen Services, and Transportation. We help our clients deliver vital services more efficiently while increasing the satisfaction of their end customers. Serco serves every branch of the U.S. military, numerous U.S. Federal civilian agencies, the Intelligence Community, the Canadian government, state, provincial and local governments, and commercial clients. While your place may look a little different depending on your role, we know you will find yours here. Wherever you work and whatever you do, we invite you to discover your place in our world. Serco is a place you can count on and where you can make an impact because every contribution matters. <br><br> To review Serco benefits please visit: <a href="https://careers.serco-na.com/us/en/what-we-offer" target="_blank" rel="noopener noreferrer">https://careers.serco-na.com/us/en/what-we-offer</a>. If you require an accommodation with the application process please email: <a href="mailto:careers@serco-na.com">careers@serco-na.com</a> or call the HR Service Desk at 800-628-6458, option 1. Please note, due to EEOC/OFCCP compliance, Serco is unable to accept resumes by email. <br><br> Candidates may be asked to present proof of identity during the selection process. If requested, this will require presentation of a government-issued I.D. (with photo) with name and address that match the information entered on the application. Serco will not take possession of or retain/store the information provided as proof of identity. For more information on how Serco uses your information, please see our Applicant Privacy Policy and Notice. <br><br> Serco does not accept unsolicited resumes through or from search firms or staffing agencies without being a contracted approved vendor. All unsolicited resumes will be considered the property of Serco and will not be obligated to pay a placement or contract fee. If you are interested in becoming an approved vendor at Serco, please email <a href="mailto:Agencies@serco-na.com">Agencies@serco-na.com</a>. <br><br> Serco is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, and other legally protected characteristics.</p> <br> <h3>Pay Transparency</h3> <br> <p>Our Total Rewards package includes competitive pay, performance-based incentives, and benefits that promote well-being and work-life balance—so you can thrive both professionally and personally. Eligible employees also gain access to a wide range of benefits from comprehensive health coverage and health savings accounts to retirement plans, life and disability insurance, and time-off programs that support work-life balance. Program availability may vary based on factors such as contract type, location, hire date, and applicable collective bargaining agreements. <br><br> Salary range: The range for this position can be found at the top of this posting. This range is provided as a general guideline and represents a good faith estimate across all experience levels. Actual base salary will be determined by a variety of factors, including but not limited to, the scope of the role, relevant experience, job-related knowledge, education and training, key skills, and geographic market considerations. For roles available in multiple states, the range may vary to reflect differences in local labor markets. In addition to base salary, eligible positions may include other forms of compensation such as annual bonuses or long-term incentive opportunities. Benefits – Comprehensible benefits for full-time employees (part-time employees receive a limited package tailored to their role): <br><br> <ul> <li>Medical, dental, and vision insurance</li> <li>Robust vacation and sick leave benefits, and flexible work arrangements where permitted by role or contract</li> <li>401(k) plan that includes employer matching funds</li> <li>Tuition reimbursement program</li> <li>Life insurance and disability coverage</li> <li>Optional coverages that can be purchased, including pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection</li> <li>Birth, adoption, parental leave benefits</li> <li>Employee Assistance Plan</li> </ul> <br><br> <p> To review all Serco benefits please visit: <a href="https://careers.serco-na.com/us/en/about-us" target="_blank" rel="noopener noreferrer">https://careers.serco-na.com/us/en/about-us</a>. <br><br> Serco complies with all applicable state and local leave laws, including providing time off under the Colorado Healthy Families and Workplaces Act for eligible Colorado residents, in alignment with our policies and benefit plans. The application window for this position is for no more than 60 days. We encourage candidates to apply promptly after the posting date, as the position may close earlier if filled or if the application volume exceeds expectations. Please submit applications exclusively through Serco’s external (or internal) career site. If an applicant has any concerns with job posting compliance, please send an email to: <a href="mailto:careers@serco-na.com">careers@serco-na.com</a>.</p>

Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...

Other Jobs To Apply

Principal IT Technical Program Manager, Infrastructure

Account Manager

Specialist, Platform Product

Merchandise Planner

Business Development Director - Google Cloud Platform

REMOTE DISNEY VACATION SPECIALIST

Program Manager III- PGM Basecamp

Update Business Information for Ebay, Walmart, Amazon.

Delta Airlines Careers Remote( Customer service ) – Work From Home – Part Time

Data Engineer (Fully Remote)

(Remote) Amazon Data Entry Jobs from Home - No Experience - Apply Now

Remote Senior QA Automation Architect

Account Manager - X (Formerly Twitter)

Remote Retention Marketing Manager, DTC eCommerce

Data Entry Specialist (Entry Level, Remote) – Earn $70K–$80K/Year - Part Time

Remote Telemedicine Veterinarian

Sr. Manager, Merchandising

VP, GTM, UCANZ

Software Engineer (Frontend/Vue) - HENNGE Email DLP

Software Engineer (Data Analytics), AI & Data Platforms (AiDP)

Talent Coach

AI/ML Engineer for an AI-Driven E-Commerce Platform

Brand & Product Marketing Growth Leader

QA Tester - BaseCamp (Remote)

TESTING SPECIALIST/TESTER

Customer Engineer/Buffer - Flexforce - Customer Engineer

Sr. Software Engineer (AI Orchestration Zone, Backend Leaning)

Senior Manager, IT

Sr Developer - Kubernetes, GitOps / GitHub, service meshes

Principal – GitHub & Azure DevOps Platform Engineering

Senior Software Engineer,Billing

Post Task Github Project Contributor Remotely

Business Development Representative

Renewals Manager - West

Staff Product Manager, RevOps & Finance Systems

Intermediate Support Engineer (SHIFT)

Fullstack Engineer (TypeScript), AI Engineering: Duo Client SDK

Data Analyst for Ecom brand – Need deep research on Shopify analytics

E-Commerce, PLG Commercial (SaaS + Shopify)

UI/UX Designer (Shopify & Ecommerce) for a USA Client - Remote

Shopify & Etsy Customer Service Agent – Remote

Shopify Expert (Remote)

Remote Veterinary Care Representative - Pharmacy Order Management

[Remote] Rust backend architect Engineer – Twitter/X Style Infrastructure

Seasonal: Guest Advocate (Cashier), General Merchandise, Inbound (Stocking) (T3273)

Target Entry Level Remote Jobs ($21/Hr WFH Jobs) -

Measure Tech – Part-Time

Territory Associate Relations Manager (Houston & Dallas)

Online Experience Analyst - The Company Store

YouTube Operations Associate Manager- Contract