DoD RMF & SOC Analyst – ATO, eMASS & Compliance

Clark Creative Solutions, LLC; California; On-site; USD 80,000 - 100,000; Full time

Benefits offered by this job

Comprehensive benefits

401k

Paid time off and holidays

Access to experienced mentors

Job summary

Clark Creative Solutions, LLC is seeking a SOC Analyst / RMF Support Specialist to support a government DoD client in California. This role requires a Bachelor's degree in IT/Cybersecurity and at least 3 years of relevant experience. Responsibilities include developing RMF documentation and supporting ATO processes. The position offers competitive salary and benefits, with opportunities for professional growth and mentorship.

Qualifications

• 3+ years of related experience and/or training (military or civilian).
• Demonstrated ability to support and sustain RMF/ATO documentation.
• Strong problem-solving skills, attention to detail, and ability to produce accurate artifacts.

Responsibilities

• Provide on-site Risk Management Framework (RMF) support for a DoD client.
• Develop new RMF artifacts and update existing documentation.
• Produce and maintain RMF documentation including critical elements.

Skills

Problem-solving skills

Attention to detail

Proficiency with Microsoft Office

Experience with RMF documentation

Education

Bachelor’s degree in IT/Cybersecurity

Tools

eMASS

Vulnerability scanning tools

Job description

Clark Creative Solutions offers a competitive salary and comprehensive benefits package offering, medical, dental coverage, 401k, paid time off and paid holidays.

Description

Join a Mission That Matters

Clark Creative Solutions (CCS) is seeking a SOC Analyst / RMF Support Specialist to support a government DoD client in California, Guam, and Japan. This role is ideal for a cybersecurity professional who can drive Authorization to Operate (ATO) outcomes by building and maintaining RMF packages, coordinating with enterprise stakeholders, and supporting continuous monitoring activities in high-availability operational environments.

Clark Creative Solutions (CCS) is a certified 8A, Service-Disabled company. Our company’s expertise are in the areas of intelligence, acquisition, logistical support, IT solutions and various personnel support services.

Our commitment to professionalism is demonstrated by our daily work ethic. CCS is wherever we need to be to get the results you desire.

What You’ll Do:

Provide on-site Risk Management Framework (RMF) support for a DoD client in Guam, including regular progress reporting to the ISSM, HQ teams, and leadership across the enterprise.

Develop new RMF artifacts and update existing documentation to support new ATOs, ongoing ATO maintenance, and reauthorization efforts.

Produce and maintain RMF documentation, including (but not limited to):

Hardware and Software Lists

Network diagrams (IAW NAVFAC FRCS Diagram Requirements Job Aid)

Ports, Protocols, and Services Management (PPSM) forms

Categorization forms

Cybersafe Grading Checklists

Criticality Analysis Checklist (as applicable)

Security Plan (SP) and Security Assessment Plan (SAP)

System-specific policies aligned to NIST 800-53 control families

Implementation and System Level Continuous Monitoring (SLCM) Plans

Raw vulnerability scan outputs and Security Center generated reports

Manual STIG/SRG checklists (CKLs)

Perform all tasks required to support RMF packages in eMASS, including uploading artifacts in proper format and executing workflow steps to support authorization decisions.

Implement security controls aligned to STIGs/SRGs, remediate findings, and support continuous monitoring by:

Patching vulnerabilities on IT/network devices and IP-based controllers

Conducting vulnerability scans across IP-based assets and producing reports

Completing manual STIG checklists (CKLs) per the approved SAP

Maintaining and updating POA&Ms, mapping vulnerabilities to controls, and inputting/uploading test results and scan results in eMASS

Provide on-site validation support and facilitate change requests and authorization boundary updates in coordination with the Operational Technology Design Authority (OTDA).

Collaborate across multiple departments to coordinate scanning and patching efforts; support intermittent nationwide travel based on site requirements and availability.

What You Bring:

Bachelor’s degree in IT/Cybersecurity (preferred).

3+ years of related experience and/or training (military or civilian).

Demonstrated ability to support and sustain RMF/ATO documentation and workflows (including eMASS).

Strong problem-solving skills, attention to detail, and the ability to produce accurate, audit-ready artifacts under deadlines.

Proficiency with Microsoft Office (Word, Excel, PowerPoint, Outlook).

Preferred Skills:

Hands-on experience implementing STIGs and SRGs, including CKL completion and validation.

Experience conducting ACAS scans and generating deliverable-ready reports.

Familiarity with industrial communication protocols and operational technology environments.

Knowledge of:

HVAC systems equipment and operation

HVAC control systems

Utility information systems and energy-management technologies

Why Join Us

When you join this team, you’re not just doing a job, you’re contributing to programs that protect service members and civilians alike. You’ll gain access to experienced mentors, impactful projects, and opportunities to grow your expertise in program analysis and defense acquisition.

Clark Creative Solutions, LLC is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.