Cybersecurity Analyst - RMF & Incident Response

BlueWater Federal Solutions, Inc.; Philadelphia (Philadelphia County); On-site; USD 70,000 - 100,000; Full time

Job summary

Bluewater Federal is seeking a Cybersecurity Analyst to support NSWC Philadelphia, providing data analysis from vulnerability scans, audits, and configurations to identify risks. You will assist in RMF compliance, continuous monitoring, and metrics reporting.

The role requires 3+ years of vulnerability assessment experience, a Security+ CE certification, and an active or interim Secret clearance. Familiarity with VRAM, ACAS, and eMASS is preferred, along with scripting skills in Python or

Qualifications

• 3+ years of experience performing vulnerability assessment and security analysis.
• Security+ CE certification is required; CySA+, CEH, or PenTest+ preferred.
• Active or interim Secret clearance is required.
• Familiarity with RMF, VRAM, ACAS, and eMASS tools; basic scripting (Python/PowerShell) preferred.

Responsibilities

• Collect and analyze data from vulnerability scans, configuration reviews, and system audits.
• Assist in documenting findings and generating metrics for cybersecurity dashboards.
• Support incident response coordination and tracking of cybersecurity events.
• Perform entry-level risk assessments under supervision of senior analysts or ISSOs.
• Help maintain POA&M tracking spreadsheets and RMF documentation in eMASS.
• Participate in training and professional development to maintain CSWF compliance.

Skills

Vulnerability analysis

Incident response

Risk assessment

Python

PowerShell

Education

Bachelor’s degree in computer science, Information Technology, or related field

Tools

VRAM

ACAS

eMASS

Job description

Bluewater Federal is seeking a Cybersecurity Analyst to support NSWC Philadelphia, providing data analysis from vulnerability scans, audits, and configurations to identify risks. You will assist in RMF compliance, continuous monitoring, and metrics reporting.

The role requires 3+ years of vulnerability assessment experience, a Security+ CE certification, and an active or interim Secret clearance. Familiarity with VRAM, ACAS, and eMASS is preferred, along with scripting skills in Python or