Cybersecurity Analyst

PAE Government Services Inc.; McLean (VA); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off and holidays

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax‑savvy options

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Cybersecurity Analyst to support our McLean, VA customer, focusing on RMF-based assessment and authorization for a federal civilian agency. The role develops RMF documentation, supports continuous monitoring, and assists in obtaining system authorization.

The ideal candidate has 5+ years in cybersecurity policy and RMF/NIST controls, with hands-on A&A experience and a TS clearance with polygraph. Compensation reflects federal contracting norms and benefits are included.

Qualifications

• 5+ years of experience in cybersecurity policy, procedures, and processes, including RMF and NIST800-53.
• Experience developing A&A documentation from scratch and performing assessments; RMF steps1-4.
• Familiarity with NIST publications, especially RMF and NIST controls.
• One or more preferred certifications: Security+, CAP, CISSP, CISM, GSEC, GCIH, or GSLC.
• Minimum DoD8570 IAM levelII.
• Experience with defense‑in‑depth principles and supporting technologies.
• Hands‑on experience with A&A processes and tools such as Xacta, Greenlight, or Roadrunner.
• Excellent customer service, organization, and multitasking skills.
• Strong critical‑thinking abilities and capacity to work quickly, efficiently, and accurately in a dynamic environment.
• Top‑Secret clearance with polygraph.
• Proficiency in reading, speaking, writing, and understanding English.

Responsibilities

• Identify key stakeholders in A&A efforts and ensure system documentation reflects current security configurations (hardware, software, data flow, interconnections, ports, protocols, and services).
• Identify potential risks associated with system configurations and advise on mitigation strategies.
• Participate in A&A status meetings and facilitate moving systems toward successful authorization.
• Estimate Level of Effort (LOE) for performing A&A activities.
• Assist customer program offices in interpreting and applying mitigation strategies.
• Conduct comprehensive reviews of vulnerabilities, architecture, and defense-in-depth strategies; report findings in POA&M documents.
• Document residual risks and provide cybersecurity risk analysis and mitigation determination results.
• Maintain assigned cybersecurity policy and procedures.
• Analyze, interpret, and apply Federal cybersecurity guidance to customer needs.
• Communicate the security posture of systems through designated reporting mechanisms.
• Collaborate with other team members on cybersecurity initiatives.

Skills

RMF

A&A knowledge

NIST controls

Customer service

Education

BA/BS degree

Tools

Xacta

Greenlight

Roadrunner

Job description

Overview

Amentum is seeking a Cybersecurity Analyst to support our McLean, VA customer. The role focuses on performing assessment and authorization (A&A) efforts under the NIST Risk Management Framework (RMF) for a federal civilian agency. The analyst will develop, review, and validate RMF documentation, support Continuous Monitoring (CONMON), and assist in ensuring systems receive authorization.

Responsibilities

• Identify key stakeholders in A&A efforts and ensure system documentation reflects current security configurations (hardware, software, data flow, interconnections, ports, protocols, and services).
• Identify potential risks associated with system configurations and advise on mitigation strategies.
• Participate in A&A status meetings and facilitate moving systems toward successful authorization.
• Estimate Level of Effort (LOE) for performing A&A activities.
• Assist customer program offices in interpreting and applying mitigation strategies.
• Conduct comprehensive reviews of vulnerabilities, architecture, and defense-in-depth strategies; report findings in POA&M documents.
• Document residual risks and provide cybersecurity risk analysis and mitigation determination results.
• Maintain assigned cybersecurity policy and procedures.
• Analyze, interpret, and apply Federal cybersecurity guidance to customer needs.
• Communicate the security posture of systems through designated reporting mechanisms.
• Collaborate with other team members on cybersecurity initiatives.

Qualifications

• 5+ years of experience in cybersecurity policy, procedures, and processes, including RMF and NIST800‑53.
• Experience developing A&A documentation from scratch and performing assessments; RMF steps1‑4.
• Familiarity with NIST publications, especially RMF and NIST controls.
• One or more preferred certifications: Security+, CAP, CISSP, CISM, GSEC, GCIH, or GSLC.
• Minimum DoD8570 Information Assurance Management (IAM) levelII.
• Experience with defense‑in‑depth principles and supporting technologies.
• Hands‑on experience with A&A processes and tools such as Xacta, Greenlight, or Roadrunner.
• Excellent customer service, organization, and multitasking skills.
• Strong critical‑thinking abilities and capacity to work quickly, efficiently, and accurately in a dynamic environment.
• Top‑Secret clearance with polygraph.
• Proficiency in reading, speaking, writing, and understanding English.

Preferred Qualifications

• BA/BS degree.
• Excellent oral and written communication skills.
• Ability to interact with leadership and crew at all levels.
• Self‑directed work capability as part of a team.

Compensation

$130,000 – $160,000

Benefits

• Health, dental, and vision insurance
• Paid time off and holidays
• Retirement benefits, including 401(k) matching
• Educational reimbursement
• Parental leave
• Employee stock purchase plan
• Tax‑savvy options
• Disability and life insurance
• Pet insurance

EEO Statement

Amentum is an Equal‑Opportunity Employer. Hiring practices provide equal opportunity for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other protected characteristic. Mandatory obligations are satisfied for lawful and reasonable accommodations as required by federal mandate.