Remote RMF Compliance Analyst – DoD Cloud Security

Decision Point Security, Inc.; Northern (KY); Hybrid; USD 80,000 - 110,000; Full time

Benefits offered by this job

Company Paid Health Insurance

Company Paid Dental Insurance

Company Paid Vision Insurance

Company Paid Life Insurance

Paid Training

Home Office Stipend

Paid Time Off

Job summary

Decision Point Security, Inc. is seeking a mid-level Cybersecurity Compliance Analyst to bridge engineering and RMF compliance. You will conduct NIST 800-53 control reviews and SRG/STIG assessments on DoW cloud architectures, delivering actionable recommendations to engineers for secure-by-design deployments.

This role integrates into engineering teams, requires strong written and oral communication, and offers remote work with travel within the United States.

Qualifications

• 3–5+ years in DoD/DoW or DIB cybersecurity/RMF
• DoD IAM/IAT Level II/III cert (e.g., Security+, CISSP)
• Hands-on RMF artifacts management in eMASS
• Experience with NIST SP 800-53, DISA STIGs, and vulnerability tools
• Active DoD Secret clearance

Responsibilities

• Assist the Security Control Assessor in RMF processes—write SARs, draft authorization memos, review SRCs, and conduct briefs.
• Manage RMF documentation in eMASS, validate artifacts, coordinate plans, maintain compliance across RMF families.
• Conduct security control assessments on complex defense cloud environments per NIST SP 800-37/800-53.
• Ensure compliance with DoD SRG/ DISA STIGs, FISMA, and cloud SRG across system lifecycles.
• Run vulnerability scans with ACAS/Nessus/SCAP; translate findings to engineering safeguards.
• Review architectures, networks, and data flows to identify vulnerabilities and craft safeguards.
• Perform continuous monitoring to maintain accurate system records and authorization status.

Skills

Communication skills

Education

DoD IAM/IAT Level II/III certification

Tools

eMASS

ACAS

Nessus

SCAP

Job description

Decision Point Security, Inc. is seeking a mid-level Cybersecurity Compliance Analyst to bridge engineering and RMF compliance. You will conduct NIST 800-53 control reviews and SRG/STIG assessments on DoW cloud architectures, delivering actionable recommendations to engineers for secure-by-design deployments.

This role integrates into engineering teams, requires strong written and oral communication, and offers remote work with travel within the United States.