Cybersecurity RMF Analyst

Boarhog LLC; San Diego (CA); On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

Medical/Dental/Vision Benefits

401K with company match

HubZone relocation stipend

Performance bonus

Job summary

Boarhog LLC is seeking a mid-level Cybersecurity Analyst in San Diego, CA to support a U.S. Navy program and RMF compliance. You will work with systems engineers to analyze cybersecurity requirements and help develop engineered solutions adhering to RMF standards.

The role requires active SECRET clearance, CompTIA Security+, and 3+ years RMF experience, with responsibilities spanning risk assessments, vulnerability reviews, and collaboration with ISSM/ISSE teams.

Qualifications

• BA or BS degree.
• MUST have at least a current CompTIA Security+ certification.
• MUST have at least three (3) years of RMF experience.
• MUST have an active SECRET level security clearance.
• Cyber Security Workforce technical certification.
• Examine architectures for cybersecurity vulnerabilities and mitigations.
• Proficiency with RMF transformation and DIACAP to RMF.
• IA directives compliance and NAVIFOR TYCOM guidance.

Responsibilities

• Support APM-CS in maintaining system authorization and continuous monitoring.
• Prepare and present risk assessment briefs for executives.
• Collaborate with Validators, ISSM and ISSE.
• Coordinate with Systems Engineering to authorize upgrades.
• Perform RMF Information Systems Security Engineer duties as defined by Navy RPG.
• Perform RMF ISO/PM duties as defined by Navy RPG.
• Conduct preliminary security assessments including Nessus, STIGs, and NIST procedures.

Skills

RMF experience

Risk assessment

Analytical mindset

A&A questioning

Education

Bachelor's degree

CompTIA Security+

CISSP (preferred)

Cyber Security Workforce cert

Tools

Nessus

STIG Benchmarks

NIST SP 800-53a

eMASS

Job description

Boarhog is in the market for a mid-level Cybersecurity Analyst in San Diego, CA. with an active SECRET level security clearance to support a U.S. Navy systems acquisition program office in the execution of Risk Management Framework (RMF), with Federal Information Security Management Act (FISMA) and government Technical Authority products and processes compliance.

The U.S. government client requires Information System Security Engineering Support Services in order to acquire and sustain Information Warfare systems and technologies Cybersecurity to ensure strong authentication, data integrity, confidentiality, non-repudiation, and availability of interoperable Command and Control, Communications, Computers, and Intelligence (C4I) capabilities.

The Cybersecurity Analyst will be expected to work with systems engineers in analyzing current and emerging operational and functional requirements (in the context of Cybersecurity) of existing systems as well as capabilities under development and assist with the development of engineered solutions that adhere to RMF cybersecurity compliance requirements, evaluating Commercial-Off-The-Shelf (COTS) and other technologies for applicability to cybersecurity compliance.

Successful candidates will be expected to immediately perform Risk Management Framework (RMF) duties, and participate in the following activities

• Support the program office’s Assistant Program Manager for Cyber Security (APM-CS) in maintaining the authorization of assigned systems, including continuous monitoring vulnerability management
• Prepare and present risk assessment briefs, including High-Risk Escalation, for executives
• Collaborate with Validators, Information Systems Security Engineers and supported Information Systems Security Manager (ISSM).
• Coordinate with Systems Engineering to authorize system upgrades
• Perform duties of the RMF Information Systems Security Engineer role as defined by the Navy’s RMF Process Guide (RPG)
• Perform assigned duties of the RMF ISO/PM role as defined by the Navy’s RPG
• Perform preliminary security assessments of components, subsystems, and systems, including reviewing and/or executing Nessus Vulnerability Scans, Security Technical Implementation Guide (STIG) Benchmarks, manual STIG testing, and NIST SP 800-53a assessment procedures

Responsibilities also include being prepared to answer routine A&A questions during meetings, gather data and perform the analysis required to close action items, and document recommendations and decisions reached.

Qualifications, Experience, And Certifications

• BA or BS degree
• MUST have at least a current CompTIA Security+ certification
• MUST have at least three (3) years of RMF experience
• MUST have an active SECRET level security clearance
• Cyber Security Workforce technical certification
• Examining system architectures, engineering processes, and cybersecurity functionality to include implementation, reviewing cross system interfaces and systems integration for feasibilities and vulnerabilities, assisting with and observing test and evaluation
• Verification and validation, engineering analysis, technical documentation analysis, reviewing software and hardware designs for cybersecurity risks or issues and recommend mitigation and resolution strategies.
• Proficiency with all phases of the RMF transformation and the activities to transition a system from DIACAP to RMF
• Assuring the system security posture is attained and maintained in accordance with DoD and DoN Information Assurance (IA) Technical Authority directives, Naval Information Forces (NAVIFOR) and Type Commander (TYCOM) operational guidance
• Proficiency with Enterprise Mission Assurance Support Service (eMASS)

Desired Qualifications, Certifications, And Discriminators

• Certified Information Systems Security Professional (CISSP) or equivalent certification
• Prior Federal Public Sector (preferably Navy) Acquisition Program Management Office experience
• Prior experience authorizing RMF High Impact, classified systems
• Knowledge of Fleet operations, IT network security, software and hardware security engineering, and cybersecurity regulations, policy, and strategy
• Eligible for a Top Secret / Sensitive Compartmented Information clearance (TS/SI/TK/G/HCS)
• Navy Qualified Validator II or III
• Currently reside in, or agree to move to, a Small Business Administration (SBA) designated Historically Underutilized Business Zone (HUBZone) area (see SBA.gov website for HUBZone map)

Boarhog Benefits

Boarhog has over 14 years of defense industrial base steady, controlled growth and profitability, offering our full-time associates a remarkable compensation package, including:

• Competitive salary and opportunities for additional compensation.
• Greater Self-Determination
• Medical/Dental/Vision Health Benefits.
• Generous 401K retirement plan after six months of full-time employment, with pre-tax/post-tax options and company matching with immediate vesting to boost retirement savings.
• Vacation.
• Health savings account.
• Stipend for residing in a HUBZone location (https://maps.certify.sba.gov/hubzone/map).
• Relocation or small signing bonus, and earned a performance bonus.

We thrive in a welcoming culture within a completely flat organization, with a demonstrated vested interest in associates' personal and professional goals and aspirations, taking pride in the resulting exceedingly low associate turnover rate. How flat? There is no fat on the Boarhog, translating to a great degree of self-determination... nobody with Boarhog has ever and will never make a living watching other associates do work. The company has no CEO, or President, or VPs, or supervisors. The Managing Member co-founded Boarhog and actively engages in the day-to-day operations and growth objectives. Pigs in the breakfast... skin-in-the-game, and the story behind our logo. https://www.BoarhogLLC.com.