Principal Cybersecurity Information Analyst

Sacramento Native American Health Center, Inc; Clearfield (UT); On-site; USD 130,000 - 145,000; Full time

Job summary

Sacramento Native American Health Center, Inc. is seeking a Principal Cybersecurity Analyst – RMF to serve as a senior technical lead for RMF/A&A activities. The role requires an active DoD Secret clearance, a 4-year degree, and 10+ years of cybersecurity experience.

The position is onsite with limited telework and involves mentoring a team of nine cybersecurity professionals. The successful candidate will provide technical leadership, develop and review RMF artifacts, and coordinate with ISSMs,

Qualifications

• Active DoD Secret clearance is required.
• Bachelor's degree in Cybersecurity, IT, CS, Engineering or related field or equivalent experience.
• 10+ years of cybersecurity/ information assurance experience.
• Experience with DoD RMF, A&A processes, and DoD 8140 requirements.
• Strong written and verbal communication skills.

Responsibilities

• Serve as senior RMF/ISSM subject matter expert and technical lead.
• Mentor RMF professionals and provide guidance.
• Lead RMF activities across the system lifecycle and ATO processes.
• Develop and review SSPs, POA&Ms, and other authorization artifacts.
• Manage RMF packages in eMASS and review for accuracy.

Skills

Active DoD Secret clearance

Bachelor's degree in Cybersecurity/IT/

10+ years cybersecurity experience

DoD 8140 Cyber Workforce requirements

Strong communication skills

Education

Bachelor's degree in Cybersecurity/IT/CS/Engineering

Tools

eMASS

NIST SP 800-37/53

DISA STIGs

POA&Ms

ACAS/Tenable

Job description

• Base Pay $130,000.00 - $145,000.00 / Year
• Job Category Cybersecurity Information Analyst
• Employee Type FT Exempt
• Required Degree 4 Year Degree

Description

Principal Cybersecurity Analyst – RMF

Salary Range $130,000 to $145,000

We are a contracted Federal drug-free workplace

We are seeking an experienced Principal Cybersecurity Analyst to serve as a senior technical lead supporting Department of Defense (DoD) Risk Management Framework (RMF) activities.

This position will provide technical leadership, mentorship, and guidance to a team of approximately nine cybersecurity professionals performing RMF and Assessment & Authorization (A&A) activities. This is a technical leadership position with no direct reports.

The position is primarily onsite with limited work-from-home flexibility, based on mission and customer requirements. An active DoD Secret clearance is required.

Key Responsibilities

• Serve as the senior RMF/ISSM subject matter expert and technical lead.
• Provide technical direction, mentorship, and guidance to a team of approximately nine RMF professionals.
• Lead and support DoD RMF activities throughout the system lifecycle.
• Develop and review SSPs, POA&Ms, security control implementation statements, assessment evidence, continuous monitoring documentation, and other authorization artifacts.
• Manage and review RMF packages in eMASS.
• Review team deliverables for technical accuracy, completeness, and compliance.
• Support security control assessments, ATO activities, audits, and authorization reviews.
• Analyze vulnerabilities, STIG findings, security risks, and remediation strategies.
• Coordinate with ISSMs, ISSOs, System Owners, engineers, Security Control Assessors, and Authorizing Official representatives.
• Mentor team members and serve as the escalation point for complex RMF and cybersecurity issues.

Requirements

Required Qualifications

• Active DoD Secret security clearance.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related discipline, or an equivalent combination of education and relevant experience as permitted by contract requirements.
• 10+ years of cybersecurity, information assurance, information security, or related experience.
• Candidate must meet applicable DoD 8140 Cyber Workforce Qualification Program requirements for the assigned work role and proficiency level.
• Relevant advanced certifications such as: CISSP, CISM, CRISC, CISA, SecurityX, or other DoD-approved qualification options applicable to the designated work role. CISSP or CISM is strongly preferred.
• Experience with eMASS, NIST SP 800-37, NIST SP 800-53/53A, DISA STIGs, POA&Ms, vulnerability management, and ATO processes.
• Experience providing technical leadership or mentorship to cybersecurity professionals.
• Strong written, verbal, analytical, and customer-facing communication skills.

Preferred Qualifications

• 5+ years of direct DoD RMF experience.
• Previous experience as an ISSM, senior ISSO, or RMF Lead.
• Experience leading RMF/A&A activities for classified DoD systems.
• Experience taking systems through initial or recurring ATO.
• Experience with ACAS/Tenable, DISA STIGs, SCAP, and continuous monitoring.

Summary

Work Arrangement

Primarily onsite with limited telework/work-from-home opportunities. Onsite presence is required for classified activities, customer meetings, system access, assessments, and other mission requirements.