RMF A&A Cybersecurity Analyst — TS/Poly

Amentum company; McLean (VA); On-site; USD 130,000 - 160,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Educational reimbursement

Parental leave

Stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Cybersecurity Analyst to support a McLean, VA customer. The role focuses on RMF-based assessment and authorization and the development of RMF documentation, SSPs, and related artifacts for a federal civilian agency.

You will work with a team to perform A&A activities, develop STP, ensure continuous monitoring, and maintain a strong cybersecurity posture across the program lifecycle. A Top-Secret with polygraph is required.

Qualifications

• 5+ years of experience in cybersecurity policy, RMF and A&A processes.
• Experience developing A&A documentation from scratch and performing assessments; RMF steps 1-4.
• Familiar with NIST RMF and controls.

Responsibilities

• Identify key stakeholders in A&A efforts and ensure system documentation reflects current security configurations.
• Participate in A&A status meetings and facilitate moving systems toward successful A&A.
• Assist to estimate LOE for performing A&A activities.
• Assist customer program offices in interpreting and applying mitigation strategies.
• Review vulnerabilities, architecture, and defense in depth and report findings in POA&Ms.

Skills

RMF

NIST SP 800-53

A&A

RMF steps 1-4

RMF documentation

Security+ CAP CISSP CISM GSEC GCIH GS·

DoD 8570 IAM II

Xacta

Greenlight/Roadrunner

cybersecurity policy

Education

BA/BS Degree

Tools

Xacta

Greenlight/Roadrunner

Job description

Amentum is seeking a Cybersecurity Analyst to support a McLean, VA customer. The role focuses on RMF-based assessment and authorization and the development of RMF documentation, SSPs, and related artifacts for a federal civilian agency.

You will work with a team to perform A&A activities, develop STP, ensure continuous monitoring, and maintain a strong cybersecurity posture across the program lifecycle. A Top-Secret with polygraph is required.