Cyber Security Analyst II: RMF, STIGs & Zero Trust Pro

Scientific Research Corporation; San Diego (CA); On-site; USD 84,000 - 140,000; Full time

Benefits offered by this job

Medical, dental, and vision plans

401(k) with company match

Paid time off & holidays

Tuition reimbursement

Job summary

Scientific Research Corporation is seeking an experienced cybersecurity professional in San Diego to develop authorization packages, perform continuous monitoring, and coordinate remediation actions with system engineers. The role requires DoD 8140/IAT II certification and RMF knowledge.

Ability to use ACAS/Nessus, SCAP, eMASS, and other tools, plus strong collaboration with admins and developers. U.S. citizenship and security clearance eligibility required.

Qualifications

• 5-8 years of cybersecurity experience.
• Must hold a DoD 8140-compliant IAT II certification (Security+CE with CE/OS) or IAT II within six months.
• Knowledge of RMF v3 and v5 (processes/workflow).
• Experience with SSPs, POA&Ms, ACAS/Nessus, SCAP, DISA STIGs, and ATO artifacts.
• Ability to coordinate STIG remediation with admins and developers.
• Experience with continuous monitoring tools such as LATTEART, BISCOTTI, and CYBORGBUNNY.
• Proficient in using eMASS for RMF v5 documentation and status.
• Open to new and innovative ideas.
• Must be able to be appointed ISSO for NCS systems within 6 months.

Responsibilities

• Develop and update assessment and authorization documents (Body of Evidence) for management and continuous monitoring.
• Perform ongoing compliance assessments using ACAS/SCAP and other tools and document results.
• Verify patches and virus definitions with automated tools.
• Follow configuration and change-management policies before software implementation.
• Conduct security audits to track events and anomalies.
• Perform security assessments of NCS systems per NIST/Navy/NSA/NAVINTEL guidance.
• Collaborate with sys admins and ISSEs to remediate issues.
• Conduct Site Based Security Assessments (SBSA) and seek DAO authorization as a Trusted Agent.
• Report incidents as per CIRP.
• Ensure systems are operated, maintained, and disposed of per security policies.

Skills

Cybersecurity experience

DoD 8140 IAT II

RMF v3/v5

System security awareness

Tools

ACAS

Nessus

SCAP

eMASS

XACTA

HBSS

SPLUNK

Job description

Scientific Research Corporation is seeking an experienced cybersecurity professional in San Diego to develop authorization packages, perform continuous monitoring, and coordinate remediation actions with system engineers. The role requires DoD 8140/IAT II certification and RMF knowledge.

Ability to use ACAS/Nessus, SCAP, eMASS, and other tools, plus strong collaboration with admins and developers. U.S. citizenship and security clearance eligibility required.