Cybersecurity Analyst (Risk Management Framework)

DAn Solutions; Corridor North (MD); On-site; USD 110,000 - 150,000; Full time

Job summary

DAn Solutions is seeking an experienced Cybersecurity Analyst specializing in RMF to support cybersecurity and information assurance in a DoD environment. The role involves risk assessments, authorization support, and maintaining cybersecurity documentation for DoD systems.

Responsibilities include implementing RMF, performing IA and CND activities, and ensuring systems meet DoD security requirements. Strong collaboration with government stakeholders and engineers is required.

Qualifications

• DoD 8570/8140-compliant IA certification may be required.
• Experience with RMF and DoD information assurance required.
• Ability to work with government stakeholders and engineers.

Responsibilities

• Support implementation and maintenance of the DoD RMF and IA requirements.
• Perform cybersecurity, IA, and CND activities for enterprise systems.
• Conduct vulnerability and risk assessments to support authorization and risk management.
• Support security assessments, certification testing, vulnerability management, and remediation.
• Develop, review, and maintain SSPs, risk assessments, and authorization documentation.

Skills

RMF

Cybersecurity

Information Assurance

CND

DoD security requirements

Education

High School Diploma

Associate's Degree

Bachelor's Degree

Master's Degree

PhD

Tools

SSPs

SRTMs

Authorization docs

Job description

Locations: Annapolis Junction, MD; Sterling, VA

Position Overview

DAn Solutions is seeking an experienced Cybersecurity Analyst specializing in Risk Management Framework (RMF) to support cybersecurity and information assurance activities within a mission-critical Department of Defense environment.

The Cybersecurity Analyst will support the security posture of enterprise information systems by conducting risk and vulnerability assessments, supporting authorization activities, maintaining cybersecurity documentation, and ensuring systems comply with applicable DoD security requirements.

Responsibilities

• Support implementation and maintenance of the DoD Risk Management Framework (RMF) and information assurance requirements.
• Perform cybersecurity, Information Assurance (IA), and Computer Network Defense (CND) activities supporting enterprise systems and environments.
• Conduct vulnerability and risk assessments and analyze findings to support system authorization and ongoing risk management.
• Support security assessments, certification testing, vulnerability management, and remediation activities.
• Develop, review, and maintain cybersecurity documentation, including:
  • System Security Plans (SSPs)
  • Risk Assessment Reports
  • Authorization/assessment documentation
  • System Requirements Traceability Matrices (SRTMs)
• Evaluate proposed security solutions to determine whether they meet requirements for systems processing classified information.
• Maintain the operational security posture of assigned systems and ensure established cybersecurity policies, standards, and procedures are followed.
• Assess the cybersecurity impact of hardware, software, firmware, configuration, and system changes.
• Support configuration management activities associated with information system security.
• Coordinate with customers, technical teams, engineers, and Government stakeholders to identify and address cybersecurity requirements.
• Provide technical guidance to junior cybersecurity personnel and support multiple technical activities or projects.
• Serve in an ISSM-level capacity when required by the program.

The PWS specifically requires compliance with applicable DoD/DIA security requirements and identifies DoDI 8510.01 RMF requirements as part of the engineering/design process.

Required Experience & Education

Candidates must meet one of the following combinations:

• High School Diploma + 10 years of relevant experience
• Associate's Degree + 8 years
• Bachelor's Degree + 6 years
• Master's Degree + 4 years
• PhD + 2 years

Certifications

• DoD 8570/8140-compliant Information Assurance certification appropriate to the position and technical environment.
• Additional applicable cybersecurity, software, or hardware certifications may be required based on the assigned environment.

Salary Range Disclaimer: The posted salary range represents the good-faith minimum and maximum compensation DAn Solutions expects to pay for this position. The position may be filled at different Labor Category (LCAT) levels depending on the selected candidate's qualifications and applicable contract requirements. Final compensation within the posted range will be determined based on the applicable LCAT and factors including education, relevant experience, certifications, and other required qualifications