IA CYBERSECURITY - RMF/eMASS

A&T Systems, Inc.; Maryland; On-site; USD 85,000 - 120,000; Full time

Job summary

A&T Systems, Inc. is seeking an Information Assurance/Cybersecurity Analyst to support the implementation and maintenance of DoD cybersecurity controls across enterprise systems. The role includes RMF management, updating eMASS documentation, and supporting ATO assets and assessments.

The candidate will work with system owners and technical teams to ensure compliance with DoD policies and NIST SP 800-53, developing SSPs, SARs, and POA&Ms, and tracking remediation efforts.

Qualifications

• Minimum 3 years hands‑on experience with DoD RMF processes and eMASS workflows.
• Security+ CE mandatory as part of requirements.
• Familiarity with NIST SP 800-53 security controls and DoD cybersecurity instructions.
• Experience developing and maintaining cybersecurity documentation.

Responsibilities

• Support full lifecycle RMF activities, including categorization, control selection, implementation, assessment, and continuous monitoring.
• Maintain and update system artifacts in eMASS, ensuring accuracy and compliance with DoD guidelines.
• Conduct security control assessments and prepare required documentation such as System Security Plans (SSP), POA&Ms, and Security Assessment Reports (SAR).
• Assist system owners and technical teams in interpreting and implementing cybersecurity requirements.
• Monitor system security posture and support ongoing mitigation efforts.
• Coordinate with IA/security leadership to support Authorization to Operate (ATO) packages and renewals.
• Review vulnerability scan results and track remediation actions.
• Ensure compliance with applicable DoD, Army, and NIST cybersecurity policies and procedures.

Skills

Independent work

Communication

Coordination

Multitasking

Tools

eMASS

ACAS

HBSS

Job description

Description

The Information Assurance/Cybersecurity Analyst supports the implementation and maintenance of cybersecurity controls across enterprise systems. The candidate will assist in managing Risk Management Framework (RMF) activities, updating system documentation in eMASS, supporting assessment and authorization efforts, and ensuring compliance with DoD cybersecurity policies and standards.

Description

The Information Assurance/Cybersecurity Analyst supports the implementation and maintenance of cybersecurity controls across enterprise systems. The candidate will assist in managing Risk Management Framework (RMF) activities, updating system documentation in eMASS, supporting assessment and authorization efforts, and ensuring compliance with DoD cybersecurity policies and standards.

Key Responsibilities

• Support full lifecycle RMF activities, including categorization, control selection, implementation, assessment, and continuous monitoring.
• Maintain and update system artifacts in eMASS, ensuring accuracy and compliance with DoD guidelines.
• Conduct security control assessments and prepare required documentation such as System Security Plans (SSP), POA&Ms, and Security Assessment Reports (SAR).
• Assist system owners and technical teams in interpreting and implementing cybersecurity requirements.
• Monitor system security posture and support ongoing mitigation efforts.
• Coordinate with IA/security leadership to support Authorization to Operate (ATO) packages and renewals.
• Review vulnerability scan results and track remediation actions.
• Ensure compliance with applicable DoD, Army, and NIST cybersecurity policies and procedures.

Requirements

• Secret Clearance
• Security+ CE
• Minimum 3 years hands‑on experience with DoD RMF processes and eMASS workflows.
• Familiarity with NIST SP 800-53 security controls and DoD cybersecurity instructions.
• Experience developing and maintaining cybersecurity documentation.
• Ability to work independently and manage multiple tasks under tight timelines.
• Strong communication and coordination skills with technical and non-technical stakeholders.

Preferred Qualifications

• Experience supporting Army or DoD information systems.
• DoD 8570 IAT/IAM certification.
• Familiarity with ACAS, HBSS, or similar DoD security tools.