Cybersecurity Analyst (Risk Management Framework)

DAn Solutions; Maryland; On-site; USD 100,000 - 125,000; Full time

Job summary

DAn Solutions is seeking an experienced Cybersecurity Analyst specializing in RMF to support cybersecurity and information assurance in a DoD environment. The role involves conducting risk and vulnerability assessments, supporting authorization, and maintaining documentation to ensure compliance with DoD security requirements.

The analyst will support RMF implementation, perform IA/CND activities, and contribute to vulnerability management while coordinating with customers and government

Qualifications

• RMF and DoD information assurance requirements
• Experience with risk assessments and vulnerability analysis
• Ability to prepare and maintain SSPs, Risk Assessment Reports, and SRTMs

Responsibilities

• Support RMF implementation and maintenance across DoD systems.
• Perform IA, CND, and vulnerability management activities.
• Conduct risk and vulnerability assessments to support system authorization and ongoing risk management.
• Develop and maintain cybersecurity documentation (SSPs, RARs, A/AD documentation, SRTMs).
• Coordinate with stakeholders to address cybersecurity requirements.
• Provide guidance to junior personnel and support multiple projects.

Skills

RMF knowledge

DoD security standards

Threat modeling

Education

High School Diploma

Associate's Degree

Bachelor's Degree

Master's Degree

PhD

Job description

Locations

Annapolis Junction, MD; Sterling, VA

Position Overview

DAn Solutions is seeking an experienced Cybersecurity Analyst specializing in Risk Management Framework (RMF) to support cybersecurity and information assurance activities within a mission-critical Department of Defense environment.

The Cybersecurity Analyst will support the security posture of enterprise information systems by conducting risk and vulnerability assessments, supporting authorization activities, maintaining cybersecurity documentation, and ensuring systems comply with applicable DoD security requirements.

Responsibilities

• Support implementation and maintenance of the DoD Risk Management Framework (RMF) and information assurance requirements.


• Perform cybersecurity, Information Assurance (IA), and Computer Network Defense (CND) activities supporting enterprise systems and environments.


• Conduct vulnerability and risk assessments and analyze findings to support system authorization and ongoing risk management.


• Support security assessments, certification testing, vulnerability management, and remediation activities.


• Develop, review, and maintain cybersecurity documentation, including:




• System Security Plans (SSPs)


• Risk Assessment Reports


• Authorization/assessment documentation


• System Requirements Traceability Matrices (SRTMs)




• Evaluate proposed security solutions to determine whether they meet requirements for systems processing classified information.


• Maintain the operational security posture of assigned systems and ensure established cybersecurity policies, standards, and procedures are followed.


• Assess the cybersecurity impact of hardware, software, firmware, configuration, and system changes.


• Support configuration management activities associated with information system security.


• Coordinate with customers, technical teams, engineers, and Government stakeholders to identify and address cybersecurity requirements.


• Provide technical guidance to junior cybersecurity personnel and support multiple technical activities or projects.


• Serve in an ISSM-level capacity when required by the program.

The PWS specifically requires compliance with applicable DoD/DIA security requirements and identifies DoDI 8510.01 RMF requirements as part of the engineering/design process.

Required Experience & Education

• High School Diploma + 10 years of relevant experience


• Associate's Degree + 8 years


• Bachelor's Degree + 6 years


• Master's Degree + 4 years


• PhD + 2 years

Certifications

• DoD 8570/8140-compliant Information Assurance certification appropriate to the position and technical environment.


• Additional applicable cybersecurity, software, or hardware certifications may be required based on the assigned environment.

Salary Range Disclaimer

The posted salary range represents the good-faith minimum and maximum compensation DAn Solutions expects to pay for this position. The position may be filled at different Labor Category (LCAT) levels depending on the selected candidate's qualifications and applicable contract requirements. Final compensation within the posted range will be determined based on the applicable LCAT and factors including education, relevant experience, certifications, and other required qualifications

Salary

Salary: $100000 - $125000 per year