A&A Analyst (ISSO)

Crest Security Assurance; Fort Lee (NJ); On-site; USD 95,000 - 135,000; Full time

Job summary

Crest Security Assurance in New Jersey seeks an experienced RMF/A&A professional to support the DoD Cybersecurity Assess & Authorize group. You will ensure systems are authorized by the AO and that technologies are assessed prior to network introduction.

Responsibilities include developing RMF Executive Packages, registering systems in eMASS, automating RMF via eMASS, registering agency connections in SNAP, and producing monthly/annual SNAP metrics.

Qualifications

• Active Secret clearance
• 8–10 years of related experience
• DoD IAM III certification(s) required (one of the following)

Responsibilities

• Develop an RMF Executive Package for each Authorization with required artifacts (SSP, SAR, POA&M, RAR, ADoc)
• Register systems in the eMASS application
• Utilize the eMASS app to support and automate the RMF
• Register and maintain all Agency connections into SNAP
• Provide monthly and annual SNAP registration metrics

Skills

RMF

ATO

NIST 800-30

NIST 800-37

eMASS

SNAP

Security clearance

DoD IAM III

Tools

eMASS

SNAP

Job description

Support the DoD customer’s Cybersecurity Assess & Authorize (A&A) group, ensure that all information systems are authorized by the Authorizing Official (AO) and that technologies are assessed prior to introduction into the network. Support multiple Authorizations to Operate (ATOs)/systems per DoDI 8510.01, NIST SP 800-30, and NIST SP 800-37. Support authorization efforts of approximately seven (7) packages on an annual basis.

Responsibilities:

• Develop a Risk Management Framework (RMF) Executive Package for each Authorization that will include a System Security Plan, Security Assessment Report (SAR), Plans of Actions and Milestones (POA&M), Risk Assessment Report (RAR), and Authorization Decision Document.
• Register systems in the Enterprise Mission Assurance Support Service (eMASS) application
• Utilize the eMASS application to support and automate the RMF
• Register and maintain all Agency connections into SNAP.
• Provide monthly and annual SNAP registration metrics.

Requirements:

• Active Secret security clearance
• At least 8-10 years of related experience
• DoD IAM IIIrequired certification/s (one of the following):