DoD RMF InfoSec Analyst (NQV) – On-Site, TS Cleared

PROSOFT; Portsmouth (VA); On-site; USD 90,000 - 140,000; Full time

Job summary

PROSOFT is seeking an Information Security Analyst (NQV) to support DoD RMF activities at Norfolk Naval Shipyard. The role requires seven years of IA controls analysis experience, Navy NQV qualification, and expertise in RMF, STIG, and vulnerability assessment.

The candidate will perform risk analyses, STIG processing, SOP/CONOP development, and security documentation while coordinating with DoD stakeholders. On-site work and Top Secret clearance are required.

Qualifications

• Minimum seven years of CS/A&A analysis support in IA controls analysis, risk assessments or risk mitigation.
• NQV qualification must be registered with Navy.
• Expert knowledge of CS/RMF requirements per DoD and DON directives.
• Experience certifying and accrediting DON information systems and networks.
• Familiarity with OPNAVINST N9210.3 Safeguarding Naval Nuclear Propulsion Information.

Responsibilities

• Follow A&A processes and standards.
• Perform system/network vulnerability analysis.
• Conduct risk assessments and mitigations.
• Perform Security Test and Evaluation processing.
• Validate STIG processing using SCAP tools and eMASS.
• Set up and execute A&A SOPs, CONOPs, and POA&M plans.
• Perform contingency planning, training and testing.
• Establish/adjust firewall policies and monitor ports/protocols.
• Review system baselines and technical drawings for gaps.
• Advise on vulnerability mitigations and produce executive reports.

Skills

NQV qualification

RMF controls

Risk assessment

Vulnerability analysis

STIG processing

A&A processes

Education

Bachelor's degree in IT

Security+ or higher certification

Tools

SCAP

Evaluate STIG

STIGMAN

eMASS

Job description

PROSOFT is seeking an Information Security Analyst (NQV) to support DoD RMF activities at Norfolk Naval Shipyard. The role requires seven years of IA controls analysis experience, Navy NQV qualification, and expertise in RMF, STIG, and vulnerability assessment.

The candidate will perform risk analyses, STIG processing, SOP/CONOP development, and security documentation while coordinating with DoD stakeholders. On-site work and Top Secret clearance are required.