Cybersecurity Analyst / RMF (ISSO)

Cybersecurity Jobs; Maryland; On-site; USD 111,000 - 126,000; Full time

Job summary

PEOPLE TECHNOLOGY AND PROCESSES LLC is seeking a Cybersecurity Analyst / RMF (ISSO) for Aberdeen Proving Ground, MD (onsite). The role focuses on maintaining continuous Authority to Operate (ATO) for multiple ATEC systems using the Risk Management Framework and eMASS, alongside security operations and vulnerability management.

Responsibilities include RMF task execution, policy/diagram creation, eMASS package management, and vulnerability remediation with defined response times.

Qualifications

• U.S. citizenship is required.
• Active Secret clearance; Top Secret / SCI eligibility.
• CE certification must be obtained within six months of appointment.
• Proficiency with Microsoft Office and computer skills.

Responsibilities

• Execute RMF tasks to achieve and maintain continuous ATO for designated ATEC systems.
• Create and maintain policies, procedures, diagrams, and ATO package artifacts.
• Manage eMASS packages, POA&Ms, and control assessments; submit renewal packages six months before expiration.
• Perform security operations with incident response times of 15 minutes (critical) and 1 hour (high).
• Run ACAS and SCAP scans; support DoD Cybersecurity Hygiene Scorecard.
• Conduct application security code analysis and threat modeling.

Skills

RMF expertise

eMASS familiarity

ACAS & SCAP knowledge

Education

High school diploma or equivalent

Tools

eMASS

ACAS

SCAP

Job description

The Cybersecurity Analyst / RMF (ISSO) role at PEOPLE TECHNOLOGY AND PROCESSES LLC supports an enterprise cybersecurity program at Aberdeen Proving Ground, MD (onsite). The position focuses on maintaining continuous Authority to Operate (ATO) for multiple ATEC systems using the Risk Management Framework and eMASS, alongside security operations and vulnerability management.

Key Responsibilities

• Execute RMF tasks to achieve and maintain continuous ATO without lapse for designated ATEC systems.
• Create and maintain policies, procedures, diagrams, hardware and software listings, and all ATO package artifacts.
• Manage eMASS packages, POA&Ms, and control assessments, and submit renewal packages no less than six months before expiration.
• Perform security operations with incident response timeframes of 15 minutes for critical and 1 hour for high, including remediation of Critical/High vulnerabilities within 30 days.
• Run ACAS and SCAP scans, manage endpoint security, and support network access control, including support for the DoD Cybersecurity Hygiene Scorecard.
• Perform application security static and dynamic code analysis and conduct threat modeling.

Required Qualifications

• High school diploma or equivalent (minimum).
• U.S. citizenship.
• Ability to speak, read, write, and understand English proficiently.
• Proficiency with computers and Microsoft Office software.
• Active Secret clearance; Top Secret / SCI eligibility (Tier 5 / T5R) required for critical- or special-sensitive cybersecurity duties.
• DoD 8140 / 8570.01-M baseline certification appropriate to the assigned work role and level, held prior to performance, with the required Computing Environment (CE) certification obtained within six (6) months of appointment.
• OPSEC Level II certification required for the designated OPSEC Coordinator.

Technologies

• Risk Management Framework (RMF)
• eMASS
• POA&Ms
• ACAS
• SCAP
• DoD Cybersecurity Hygiene Scorecard
• Static and dynamic code analysis
• Threat modeling
• Microsoft Office

Clearance Requirements

• Secret (minimum) (Tier 3 / T3R).
• Top Secret / SCI eligible (Tier 5 / T5R) required to administer classified systems or networks, or for critical- or special-sensitive duties.

Location and Work Model

Aberdeen Proving Ground, MD (onsite).

Compensation

USD 111,000 - 126,000 per year.

Scope of Work

The selected candidate executes the enterprise cybersecurity program, maintaining continuous ATO for multiple ATEC systems through the Risk Management Framework and eMASS. The role also includes security operations and vulnerability management.