DoD RMF Cyber Security Analyst - ATO & Vulnerability Expert

4M Research, Inc; Huntsville (AL); On-site; USD 85,000 - 120,000; Full time

Job summary

4M Research, Inc. in Huntsville, AL seeks a Cyber Security Analyst to identify vulnerabilities, determine security controls, and support ATO activities. The role requires hands-on RMF experience, DoD policy knowledge, and experience with vulnerability tools such as ACAS/Nessus and STIG-based assessments.

The candidate will prepare artifacts, analyze results, and maintain evidence to demonstrate compliance with NIST and DoD requirements. U.S. citizenship and travel up to 15% are required.

Qualifications

• BS in a related field or 7+ years’ direct experience.
• 5+ years in cyber security/Information Assurance with RMF experience.
• DoD RMF experience and maintaining ATOs.
• Hands-on experience with eMASS.
• Experience with ACAS/Nessus, SCC, STIG Viewer, Evaluate-STIG.
• Knowledge of NIST SP 800-53 and DoD cybersecurity policies.
• DoD 8570/8140-compliant IAT Level II certification (Security+ CE or higher).
• Active DoD Secret clearance.
• Ability to travel up to 15%.

Responsibilities

• Identify system vulnerabilities and determine appropriate security controls to mitigate or eliminate risk.
• Prepare artifacts and documents to support government Authorization to Operate (ATO) activities.
• Conduct and/or support vulnerability and security compliance assessments using applicable tools (ACAS/Nessus, SCC, STIG Viewer, Evaluate-STIG, etc.).
• Analyze assessment results, document security deficiencies, and support remediation activities.
• Maintain evidence to demonstrate compliance with applicable NIST, DoD, DISA, and Army cybersecurity requirements.

Skills

Cyber security

RMF

NIST SP 800-53

DoD policy

Security+ CE

Clearance (DoD)

Education

Bachelor's degree

Tools

ACAS/Nessus

SCAP/SCC

STIG Viewer

Evaluate-STIG

eMASS

Job description

4M Research, Inc. in Huntsville, AL seeks a Cyber Security Analyst to identify vulnerabilities, determine security controls, and support ATO activities. The role requires hands-on RMF experience, DoD policy knowledge, and experience with vulnerability tools such as ACAS/Nessus and STIG-based assessments.

The candidate will prepare artifacts, analyze results, and maintain evidence to demonstrate compliance with NIST and DoD requirements. U.S. citizenship and travel up to 15% are required.