RMF Analyst: End-to-End Cyber Risk & ATO Lead

RiseMe; Colorado Springs (CO); On-site; USD 110,000 - 150,000; Full time

Job summary

SAIC is seeking an RMF Analyst/ISSO on onsite assignment in Colorado Springs to support RMF requirements for NORAD/USNORTHCOM IT services. You will own RMF activities, drive ATO sustainment, and maintain eMASS records while coordinating with system owners and engineers.

The role requires TS/SCI clearance, DoD RMF experience, and strong knowledge of STIGs, CNSSI 1253, and security baselines. You will deliver SSPs, POA&Ms, and weekly status updates in a fast-paced, cyber-ready environment.

Qualifications

• DoD 8140.03 at intermediate level cert (e.g., Security+) or equivalent
• Bachelor's in info assurance/cybersecurity or related field, with 3–5 years of relevant experience, or HS diploma with 7–10 years
• Active TS/SCI clearance
• Experience as ISSO or cybersecurity practitioner supporting DoD systems
• RMF lifecycle artifact management and eMASS package management
• Remediation coordination for POA&Ms and security controls
• Experience with CNSSI 1253 categorization, STIGs and security baselines
• Ability to lead cross-functional technical teams and work autonomously

Responsibilities

• Support and execute RMF across enterprise systems and enclaves, maintaining registrations and evidentiary records in eMASS
• Own RMF activities with ISSO-level responsibility to sustain ATO and continuous monitoring
• Maintain CORA-ready posture by enforcing cybersecurity standards and operational hygiene
• Manage DoD and NIST controls per DoDD 8500.01, DoDI 8510.01, DoDD 8140.01, NIST 800-53
• Analyze scan results from ACAS/SCAP to evaluate risk and posture, maintain ATO
• Lead SSP development, validation, and ensure STIGs are implemented
• Own POA&Ms end-to-end, drive closure with stakeholders
• Collaborate with system admins, network engineers, and leadership to remediate issues
• Provide strategic cybersecurity guidance and status updates to owners and leadership
• Provide weekly status reports on packages, risk posture, issues, and next steps
• Develop, refine, and enforce operational policies and audit-ready artifacts

Job description

SAIC is seeking an RMF Analyst/ISSO on onsite assignment in Colorado Springs to support RMF requirements for NORAD/USNORTHCOM IT services. You will own RMF activities, drive ATO sustainment, and maintain eMASS records while coordinating with system owners and engineers.

The role requires TS/SCI clearance, DoD RMF experience, and strong knowledge of STIGs, CNSSI 1253, and security baselines. You will deliver SSPs, POA&Ms, and weekly status updates in a fast-paced, cyber-ready environment.