Cybersecurity RMF Analyst III

HRsmart; Louisiana, Norfolk, Tampa (MO, VA, FL); On-site; USD 90,000 - 140,000; Full time

Job summary

Modus21, LLC, a Charleston, SC based firm, seeks a Cybersecurity RMF Analyst III to support RMF documentation, security control alignment, and continuous monitoring for Navy IT programs.

Responsibilities include reviewing RMF artifacts, coordinating with system owners, and ensuring compliance with DoN RMF process requirements. A Bachelor’s degree or equivalent is required, plus DoD RMF experience and certifications are desirable.

Qualifications

• Bachelor's degree in a technical or managerial related discipline or HS/GED.
• RMF knowledge and experience with RMF process.
• Experience with DoD RMF processes and related security controls.
• Ability to obtain DoD Top Secret clearance.

Responsibilities

• Assist in RMF documentation (SSPs, SAPs, POA&Ms).
• Align security controls with RMF guidance (NIST 800-53).
• Test and monitor security controls for effectiveness.
• Review test results and scans (ACAS, Eval-STIG, STIG checklists).
• Maintain routine security reviews and audits for compliance.
• Update DITPR-DON records as required.

Education

Bachelor's degree

High School Diploma or GED

Tools

eMASS

ACAS

Job description

Share this job as a link in your status update to LinkedIn.

Job Title

Cybersecurity RMF Analyst III

Job Type

Full-time

Category

Professional Services

Education

Bachelor's Degree

Location

Job Description

Modus21, LLC is a Charleston, South Carolina based small business and technology consulting firm specializing in solving complex business problems for global business and government clients. Modus21 provides Model Based Systems Engineering, Process Orchestration/Automation, Cloud Computing, Cybersecurity, DevSecOps, Agile Software Development, and Systems Integration services to both commercial and government clients. We have worked with the Department of Defense (DoD) and civil agencies since 2007, and we have been working with Naval Information Warfare Center Atlantic (formerly SPAWAR) since 2008. Our philosophy is simple – deliver quality through high performance to our clients; provide value to our clients through the ability to streamline, measure, and improve their business processes via business intelligence and business architecture; and practice professional integrity by being trustworthy and reliable. Our expertise has proven highly successful in helping organizations recognize greater value by aligning their strategy and objectives to technology and execution.
Scope of Work: Modus21 has recently been awarded a five year contract for the Cloud Computing Innovation, Transformation, and Integration (CLOUD CITI) and Enterprise Systems (ES) Department Information Technology Support for the Navy. Modus21, LLC and it’s team of subcontractors work will encompass Information Technology (IT), network, planning, architectural analysis, evaluation, design, development, engineering, transition, cyber security, programmatic and sustainment support services to provide the Enterprise Systems (ES) Department of the Naval Information Warfare Center (NIWC) Atlantic Service Centers world-class solutions to complex IT challenges in an uninterrupted manner.

As part of the program, the Cybersecurity RMF Analyst plays a foundational role in obtaining and maintaining authorization for core infrastructure systems managed by Cloud CITI. This position requires hands‑on experience with Enterprise Mission Assurance Support Services (eMASS) to capture information and artifacts necessary for authorization in accordance with the Department of the Navy (DoN) RMF Process Guide, Navy Security Control Assessor Risk Assessment Guide, and CYBERSAFE requirements. The Cybersecurity RMF Analyst will support collaboration with system owners and security personnel to identify and mitigate risks throughout the system lifecycle.

Responsibilities :

• RMF Support & Documentation: Assist in the development and maintenance of RMF documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), and Plans of Action and Milestones (POA&Ms).
• Security Control Alignment: Support the determination of applicable security controls in alignment with NIST 800-53 and other agency-specific guidance.
• Testing and Monitoring: Assist in testing and monitoring security controls to ensure their continued effectiveness.
• Technical Review: Help review and assess technical test results, such as ACAS scans, Eval-STIG scans, and STIG checklists, to assist in resolving findings.
• Compliance Maintenance: Conduct routine security reviews and audits to ensure ongoing compliance.
• Record Management: Update Department of Defense Information Technology Portfolio Repository – Department of the Navy (DITPR-DON) records as required.

Requirements/Experience:

• Minimum Education: Bachelor’s degree in a technical or managerial related discipline or High School Diploma or GED
• Minimum Experience: Five (5) years with Bachelor’s degree or seven (7) years with HS/GED of practical experience demonstrating competency in Cybersecurity, Engineering, Test & Evaluation (T&E) or Assessment & Authorization (A&A)/ Certification & Accreditation (C&A) related field.
• RMF Knowledge: Individual shall demonstrate a working knowledge of the Risk Management Framework (RMF) process.
• Tool Familiarity: Experience working with Information Assurance tools such as DISA Enterprise Mission Assurance Support Service (eMASS) and Assured Compliance Assessment Solution (ACAS).
• Authorization Skills: Familiarity with security policies and guidance documents to assist with the preparation and maintenance of process artifacts, traceability documents, and Authority to Operate (ATO) requirements
• Must possess at least one (1) certification from each of the following categories:
  • Cybersecurity Foundational: CompTIA Security+ or completion of a vendor/platform-specific training.
• Ability to obtain a Department of Defense (DoD) TOP SECRETSecurity Clearance.
• Strong communication skills, attention to detail, and willingness to learn.

Desired Certifications:

• Cybersecurity Compliance or Cloud Security Certification: ISC2 CGRC-Governance, Risk & Compliance or CCSP-Certified Cloud Security Professional
• Technical/Platform Specific: Examples include Cisco Certified Network Associate (CCNA), Microsoft role-based certifications (MCAD, MCDBA), Red Hat Certification Program (RHCP), VMware Certified Technical Associate, or Cloud certifications (e.g., AWS Architect, Developer, SysOps Associate).