Information Assurance Analyst II - RMF & DoD Compliance

Nakupuna Solutions; Fort Belvoir (VA); On-site; USD 165,000 - 185,000; Full time

Job summary

Nakupuna Solutions is seeking an Information Assurance Analyst II to support the C5ISR Center cybersecurity program at Fort Belvoir, VA. The role involves assessing security posture, maintaining RMF artifacts in eMASS, and coordinating with system owners and leadership on risk mitigation and authorization activities.

The position requires a Bachelor's degree in a cyber-related field, 5+ years of information security experience, and relevant DoD certifications (Security+ or equivalent;

Qualifications

• Bachelor's degree in a cybersecurity-related field preferred.
• 5+ years of information security or related experience preferred.
• Required certification: CompTIA Security+ CE or equivalent DoD qualification.
• Preferred certifications: CISSP, CGRC, CISM, or GIAC (GSEC).

Responsibilities

• Assess information system security controls and compliance with DoD, Army, NIST, and C5ISR requirements.
• Conduct security risk analyses and document mitigation actions.
• Review vulnerability results and coordinate remediation with system owners.
• Maintain RMF artifacts and authorization documentation in eMASS.
• Support ATO activities, POA&Ms, and ongoing authorization requirements.
• Prepare status reports for leadership and customer stakeholders.

Skills

RMF & NIST

Vulnerability analysis

Security policy guidance

Education

Bachelor's degree in Cybersecurity, Information Technology, or a related field

Tools

ACAS

eMASS

DISA STIGs

SRGs

Job description

Nakupuna Solutions is seeking an Information Assurance Analyst II to support the C5ISR Center cybersecurity program at Fort Belvoir, VA. The role involves assessing security posture, maintaining RMF artifacts in eMASS, and coordinating with system owners and leadership on risk mitigation and authorization activities.

The position requires a Bachelor's degree in a cyber-related field, 5+ years of information security experience, and relevant DoD certifications (Security+ or equivalent;