Cybersecurity Analyst - RMF & UAS Security Evaluator

Society of Defense Financial Management; Fort Gregg-Adams (VA); On-site; USD 100,000 - 145,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

401k plan

Job summary

Defense Contract Management Agency (DCMA) is seeking an experienced Cybersecurity Analyst to support cybersecurity evaluation of drone systems and components under the Blue UAS Cleared List Program. The role involves reviewing assessment reports, identifying vulnerabilities, and validating remediation plans to ensure government security requirements are met.

The position requires a bachelor's degree in a related technical field, five years of practical experience, and active DoD IAM/IAT

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Computer Engineering, or a related technical discipline.
• Minimum of five (5) years of practical experience preferred.
• Active DoD 8570/8140 IAM or IAT Level II or III certification required (e.g., CISSP, CISM, or CompTIA Security+).
• Demonstrated expertise applying NIST SP 800-53 controls and RMF to achieve an Authority to Operate (ATO).

Responsibilities

• Serve as technical SME supporting cybersecurity evaluation of product submissions.
• Provide expertise on cybersecurity requirements, standards, risk management, and assessment methodologies.
• Interpret cybersecurity assessment results and remediation plans for adequacy.
• Identify vulnerabilities, threats, and residual risks affecting DoD missions.
• Review assessment reports and evidence for completeness and technical sufficiency.

Skills

Cybersecurity assessment

NIST RMF

IAT Level II/III

Vulnerability analysis

Embedded security

Education

Bachelor's degree in Cybersecurity

Job description

Defense Contract Management Agency (DCMA) is seeking an experienced Cybersecurity Analyst to support cybersecurity evaluation of drone systems and components under the Blue UAS Cleared List Program. The role involves reviewing assessment reports, identifying vulnerabilities, and validating remediation plans to ensure government security requirements are met.

The position requires a bachelor's degree in a related technical field, five years of practical experience, and active DoD IAM/IAT