Cybersecurity Analyst: RMF, ATO & Vulnerability Specialist

Leidos Inc; Keyport (WA); On-site; USD 73,000 - 133,000; Full time

Job summary

Leidos is seeking a Cybersecurity Analyst to support NAVSEA NUWC Keyport in Keyport, WA. You will implement RMF security controls, perform vulnerability management, and assist in ATO processes for DoD/Navy systems.

The role emphasizes collaboration with a technical team, monitoring security posture, producing assessments, and sustaining compliance throughout system lifecycles. Clear communication and strong analytical writing are essential to success.

Qualifications

• Bachelor's degree with 4+ or 8+ years, or Master's with 2+ or 6+ years.
• Top Secret clearance with SCI eligibility or TS/SCI.
• 3+ years in cybersecurity, RMF, vulnerability management, and continuous monitoring in DoD/Navy.
• Hands-on with ACAS, IAVM, security control assessments, A&A and ATO support.
• Knowledge of RMF, STIGs, DoD/Navy requirements, and DoD 8140.03.
• Strong communication and collaboration with teams and stakeholders.
• Strong analytical and technical writing skills.

Responsibilities

• Implement and test security controls per RMF, STIGs, and DoD/Navy directives.
• Conduct ACAS scans, analyze results, and remediate vulnerabilities.
• Support risk identification, mitigation, continuous monitoring, and compliance reporting.
• Prepare and maintain A&A packages to obtain and sustain an ATO.
• Provide day-to-day cybersecurity support to the Project Manager and Team Leads.

Skills

RMF compliance

Vulnerability management

IAVM processes

ATO support

ACAS scans

DoD/Navy requirements

Communication

Technical writing

Education

Bachelor's degree in Cybersecurity

Master's degree in Cybersecurity

Tools

ACAS

Job description

Leidos is seeking a Cybersecurity Analyst to support NAVSEA NUWC Keyport in Keyport, WA. You will implement RMF security controls, perform vulnerability management, and assist in ATO processes for DoD/Navy systems.

The role emphasizes collaboration with a technical team, monitoring security posture, producing assessments, and sustaining compliance throughout system lifecycles. Clear communication and strong analytical writing are essential to success.