Cybersecurity Analyst: RMF & FedRAMP Specialist - Clearance

Spectra Tech, Inc.; West Mifflin (Allegheny County); On-site; USD 90,000 - 120,000; Full time

Job summary

Spectra Tech, Inc. supports the Naval Nuclear Laboratory and seeks a Cybersecurity subcontractor to execute RMF directives and assist in building SSPs and SARs for NNPP Net. The role includes contributing to POA&Ms and RBDs across DoD/DoE environments, with emphasis on RSA Archer usage.

The candidate should have DoD/DoE security experience, NIST RMF familiarity, and certifications such as Security+, CISSP or CCSK, with a clearance to start.

Qualifications

• Four+ years combined experience in security roles (validator/assessor/ISSO/ISSM).
• Two+ years developing authorization packages per NIST RMF (800-37/800-53/800-53a).
• Two+ years FedRAMP experience.
• Security+ certification.
• Experience with RSA Archer.
• Two+ years on IT security project teams.
• At least one year managing IT projects.
• Knowledge of IT infrastructure and services (data centers, servers, networks, cloud).
• Knowledge of security policies (NIST SPs, STIGs, DoD SRG).
• Knowledge of endpoint protection and vulnerability management tools.
• Experience authorizing information systems in classified DoE/DoD environments.
• Familiarity with NIST 800-171.
• CISSP and CCSK certifications.

Responsibilities

• Execute RMF directives per NIST guidance.
• Assist in developing System Security Plans (SSPs) and Security Assessment Reports (SARs).
• Support development of Plans of Action and Milestones (POA&Ms) and Risk Based Decisions (RBDs).
• Work with NNPP Net using RSA Archer.

Skills

Security role experience

ISSO/ISSM experience

Security control validation

Education

Security+ Certification

CISSP certification

CCSK certification

Tools

RSA Archer

FedRAMP knowledge

Job description

Spectra Tech, Inc. supports the Naval Nuclear Laboratory and seeks a Cybersecurity subcontractor to execute RMF directives and assist in building SSPs and SARs for NNPP Net. The role includes contributing to POA&Ms and RBDs across DoD/DoE environments, with emphasis on RSA Archer usage.

The candidate should have DoD/DoE security experience, NIST RMF familiarity, and certifications such as Security+, CISSP or CCSK, with a clearance to start.