Cybersecurity Analyst / RMF (ISSO)

People, Technology & Processes, LLC; Maryland; On-site; USD 90,000 - 140,000; Full time

Job summary

People, Technology & Processes, LLC seeks a Cybersecurity Analyst / RMF (ISSO) to maintain continuous Authority to Operate across multiple systems using RMF and eMASS. The role performs security operations and vulnerability management to protect DoD networks.

The position requires U.S. citizenship, an active Secret clearance (Top Secret/SCI eligibility for sensitive duties), and DoD 8570-compliant certifications. Excellent English skills and proficiency with standard software are required.

Qualifications

• US citizenship required.
• Ability to speak, read, write, and understand English proficiently.
• Proficiency with computers and Microsoft Office software.
• Active Secret clearance; Top Secret / SCI eligibility required for certain duties.
• DoD 8140 / 8570.01-M baseline certification with CE cert within six months.
• OPSEC Level II certification required for the designated OPSEC Coordinator.

Responsibilities

• Execute RMF tasks to achieve and maintain continuous ATO for designated systems.
• Create and maintain policies, procedures, diagrams, hardware and software listings, and all ATO package artifacts.
• Manage eMASS packages, POA&Ms, and control assessments; submit renewal packages at least six months before expiration.
• Perform security operations with 15-minute critical and 1-hour high incident response; remediate Critical/High vulnerabilities within 30 days.
• Run ACAS and SCAP scans, manage endpoint security and network access control; support the DoD Cybersecurity Hygiene Scorecard.
• Perform application security static and dynamic code analysis and threat modeling.

Skills

English proficiency

Computer proficiency

RMF / risk management

eMASS familiarity

ACAS / SCAP

Education

High School Diploma or GED

Tools

eMASS

ACAS

SCAP

Job description

Description

Description

Position Title

Cybersecurity Analyst / RMF (ISSO)

Location

Aberdeen Proving Ground, MD

Clearance required

Secret minimum (Tier 3 / T3R); Top Secret / SCI eligible (Tier 5 / T5R) required to administer classified systems or networks or for critical- or special-sensitive duties.

Scope of Work

Executes the enterprise cybersecurity program, maintaining continuous Authority to Operate for multiple ATEC systems through the Risk Management Framework and eMASS, and performing security operations and vulnerability management.

Responsibilities Include (but Are Not Limited To)

• Execute RMF tasks to achieve and maintain continuous ATO without lapse for designated ATEC systems
• Create and maintain policies, procedures, diagrams, hardware and software listings, and all ATO package artifacts
• Manage eMASS packages, POA&Ms, and control assessments and submit renewal packages no less than six months before expiration
• Perform security operations with 15-minute critical and 1-hour high incident response, remediating Critical/High vulnerabilities within 30 days
• Run ACAS and SCAP scans, manage endpoint security and network access control, and support the DoD Cybersecurity Hygiene Scorecard
• Perform application security static and dynamic code analysis and threat modeling

Qualifications

• High school diploma or equivalent (minimum)
• U.S. citizenship
• Ability to speak, read, write, and understand English proficiently
• Proficiency with computers and Microsoft Office software
• Active Secret clearance; Top Secret / SCI eligibility (Tier 5 / T5R) required for critical- or special-sensitive cybersecurity duties
• DoD 8140 / 8570.01-M baseline certification appropriate to the assigned work role and level, held prior to performance, with the required computing environment (CE) certification obtained within six (6) months of appointment.
• OPSEC Level II certification required for the designated OPSEC Coordinator