Cybersecurity RMF Analyst III with Security Clearance

Modus21, LLC.; Charleston (SC); On-site; USD 85,000 - 110,000; Full time

Job summary

Modus21, LLC, a Charleston-based technology consulting firm, seeks a Cybersecurity RMF Analyst to support DoD cloud and enterprise systems projects.

The role requires hands-on RMF activities, SSP/SAP/POA&M documentation, and collaboration with system owners to ensure ATO readiness under NIST 800-53.

Candidates should have 5+ years in relevant fields, a degree or equivalent, and be eligible for DoD clearance and US citizenship.

Qualifications

• Bachelor’s degree or HS/GED in a technical or managerial field.
• 5+ years of cybersecurity, engineering, T&E, or A&A/C&A experience.
• Working knowledge of RMF process and DoD guidance.
• Experience with IA tools such as eMASS and ACAS.
• US citizenship and ability to obtain DoD TS clearance.

Responsibilities

• RMF documentation: SSPs, SAPs, and POA&Ms.
• Security control alignment with NIST 800-53 and agency guidance.
• Testing and monitoring security controls for effectiveness.
• Technical review of test results (ACAS, Eval-STIG, STIG).
• Conduct compliance reviews and update DITPR-DON records.

Skills

RMF knowledge

Strong communication skills

Attention to detail

Willingness to learn

Security clearance readiness

Education

Bachelor's degree in a technical or managerial discipline

High School Diploma or GED

Tools

eMASS

ACAS

Job description

Modus21, LLC is a Charleston, South Carolina based small business and technology consulting firm specializing in solving complex business problems for global business and government clients. Modus21 provides Model Based Systems Engineering, Process Orchestration/Automation, Cloud Computing, Cybersecurity, DevSecOps, Agile Software Development, and Systems Integration services to both commercial and government clients. We have worked with the Department of Defense (DoD) and civil agencies since 2007, and we have been working with Naval Information Warfare Center Atlantic (formerly SPAWAR) since 2008. Our philosophy is simple – deliver quality through high performance to our clients; provide value to our clients through the ability to streamline, measure, and improve their business processes via business intelligence and business architecture; and practice professional integrity by being trustworthy and reliable. Our expertise has proven highly successful in helping organizations recognize greater value by aligning their strategy and objectives to technology and execution. Scope of Work: Modus21 has recently been awarded a five year contract for the Cloud Computing Innovation, Transformation, and Integration (CLOUD CITI) and Enterprise Systems (ES) Department Information Technology Support for the Navy. Modus21, LLC and it’s team of subcontractors work will encompass Information Technology (IT), network, planning, architectural analysis, evaluation, design, development, engineering, transition, cyber security, programmatic and sustainment support services to provide the Enterprise Systems (ES) Department of the Naval Information Warfare Center (NIWC) Atlantic Service Centers world-class solutions to complex IT challenges in an uninterrupted manner. As part of the program, the Cybersecurity RMF Analyst plays a foundational role in obtaining and maintaining authorization for core infrastructure systems managed by Cloud CITI. This position requires hands‑on experience with Enterprise Mission Assurance Support Services (eMASS) to capture information and artifacts necessary for authorization in accordance with the Department of the Navy (DoN) RMF Process Guide, Navy Security Control Assessor Risk Assessment Guide, and CYBERSAFE requirements. The Cybersecurity RMF Analyst will support collaboration with system owners and security personnel to identify and mitigate risks throughout the system lifecycle.

Responsibilities

• RMF Support & Documentation: Assist in the development and maintenance of RMF documentation, including System Security Plans (SSPs), Security Assessment Plans (SAPs), and Plans of Action and Milestones (POA&Ms).
• -Security Control Alignment: Support the determination of applicable security controls in alignment with NIST 800-53 and other agency-specific guidance.
• -Testing and Monitoring: Assist in testing and monitoring security controls to ensure their continued effectiveness.
• -Technical Review: Help review and assess technical test results, such as ACAS scans, Eval-STIG scans, and STIG checklists, to assist in resolving findings.
• -Compliance Maintenance: Conduct routine security reviews and audits to ensure ongoing compliance.
• -Record Management: Update Department of Defense Information Technology Portfolio Repository – Department of the Navy (DITPR-DON) records as required.

Requirements/Experience

• Minimum Education: Bachelor’s degree in a technical or managerial related discipline or High School Diploma or GED
• Minimum Experience: Five (5) years with Bachelor’s degree or seven (7) years with HS/GED of practical experience demonstrating competency in Cybersecurity, Engineering, Test & Evaluation (T&E) or Assessment & Authorization (A&A)/ Certification & Accreditation (C&A) related field.
• RMF Knowledge: Individual shall demonstrate a working knowledge of the Risk Management Framework (RMF) process.
• Tool Familiarity: Experience working with Information Assurance tools such as DISA Enterprise Mission Assurance Support Service (eMASS) and Assured Compliance Assessment Solution (ACAS).
• Authorization Skills: Familiarity with security policies and guidance documents to assist with the preparation and maintenance of process artifacts, traceability documents, and Authority to Operate (ATO) requirements
• Must possess at least one (1) certification from each of the following categories:
• Cybersecurity Foundational: CompTIA Security+ or completion of a vendor/platform-specific training.
• -Ability to obtain a Department of Defense (DoD) TOP SECRET Security Clearance.
• U.S. citizenship required.
• Strong communication skills, attention to detail, and willingness to learn.
• Desired Certifications:
• Cybersecurity Compliance or Cloud Security Certification: ISC2 CGRC-Governance, Risk & Compliance or CCSP-Certified Cloud Security Professional
• Technical/Platform Specific: Examples include Cisco Certified Network Associate (CCNA), Microsoft role-based certifications (MCAD, MCDBA), Red Hat Certification Program (RHCP), VMware Certified Technical Associate, or Cloud certifications (e.g., AWS Architect, Developer, SysOps Associate).