Cybersecurity Analyst (Risk Management Framework)

DAn Solutions; Corridor North (MD); On-site; USD 110,000 - 170,000; Full time

Job summary

DAn Solutions is seeking an experienced Cybersecurity Analyst specializing in RMF to support DoD cybersecurity activities. The role includes risk management, assessment, and documentation to ensure DoD security requirements are met.

The candidate will perform vulnerability analyses, support authorization activities, and produce critical artifacts such as SSPs and risk assessment reports, while coordinating with government stakeholders and providing guidance to junior staff.

Qualifications

• DoD RMF and 8510.01 knowledge and experience.
• Experience delivering SSPs, risk assessments, and ATO artifacts.
• Ability to coordinate with DoD stakeholders and government customers.
• Strong documentation and communication skills.

Responsibilities

• Support RMF implementation and continuous monitoring activities.
• Conduct vulnerability assessments and risk analyses for authorization packages.
• Develop and maintain System Security Plans and risk assessment reports.
• Coordinate with technical teams and government stakeholders on cybersecurity requirements.
• Provide guidance to junior cybersecurity personnel and support multiple projects.

Skills

RMF

DoD Security

Vulnerability Assessment

IA/CND

SSP Documentation

System Authorization

Education

Bachelor's Degree

Master's Degree

Associate's Degree

PhD

Job description

Locations: Annapolis Junction, MD; Sterling, VA

Position Overview

DAn Solutions is seeking an experienced Cybersecurity Analyst specializing in Risk Management Framework (RMF) to support cybersecurity and information assurance activities within a mission-critical Department of Defense environment.

The Cybersecurity Analyst will support the security posture of enterprise information systems by conducting risk and vulnerability assessments, supporting authorization activities, maintaining cybersecurity documentation, and ensuring systems comply with applicable DoD security requirements.

Responsibilities

• Support implementation and maintenance of the DoD Risk Management Framework (RMF) and information assurance requirements.
• Perform cybersecurity, Information Assurance (IA), and Computer Network Defense (CND) activities supporting enterprise systems and environments.
• Conduct vulnerability and risk assessments and analyze findings to support system authorization and ongoing risk management.
• Support security assessments, certification testing, vulnerability management, and remediation activities.
• Develop, review, and maintain cybersecurity documentation, including:
  • System Security Plans (SSPs)
  • Risk Assessment Reports
  • Authorization/assessment documentation
  • System Requirements Traceability Matrices (SRTMs)
• Evaluate proposed security solutions to determine whether they meet requirements for systems processing classified information.
• Maintain the operational security posture of assigned systems and ensure established cybersecurity policies, standards, and procedures are followed.
• Assess the cybersecurity impact of hardware, software, firmware, configuration, and system changes.
• Support configuration management activities associated with information system security.
• Coordinate with customers, technical teams, engineers, and Government stakeholders to identify and address cybersecurity requirements.
• Provide technical guidance to junior cybersecurity personnel and support multiple technical activities or projects.
• Serve in an ISSM-level capacity when required by the program.

The PWS specifically requires compliance with applicable DoD/DIA security requirements and identifies DoDI 8510.01 RMF requirements as part of the engineering/design process.

Required Experience & Education

Candidates must meet one of the following combinations:

• High School Diploma + 10 years of relevant experience
• Associate's Degree + 8 years
• Bachelor's Degree + 6 years
• Master's Degree + 4 years
• PhD + 2 years

Certifications

• DoD 8570/8140-compliant Information Assurance certification appropriate to the position and technical environment.
• Additional applicable cybersecurity, software, or hardware certifications may be required based on the assigned environment.

Salary Range Disclaimer: The posted salary range represents the good-faith minimum and maximum compensation DAn Solutions expects to pay for this position. The position may be filled at different Labor Category (LCAT) levels depending on the selected candidate's qualifications and applicable contract requirements. Final compensation within the posted range will be determined based on the applicable LCAT and factors including education, relevant experience, certifications, and other required qualifications