RMF Analyst II — Cybersecurity & RMF Specialist

Chenega MIOS SBU; Huntsville (AL); On-site; USD 85,000 - 105,000; Full time

Benefits offered by this job

Professional development

Benefits package

Job summary

Chenega MIOS in Huntsville, AL seeks an RMF Analyst II to oversee RMF tasks and support ATO activities for Army programs. The role involves developing system security documentation, coordinating with control assessors, and ensuring compliance across documentation and testing stages.

The analyst will manage eMASS activities, conduct ST&E, and track milestones while coordinating with senior leadership. A Secret clearance with TS eligibility is required.

Qualifications

• Bachelor's degree in science, Technology, Engineering, Mathematics, IT, or business-related programs is required.
• 2+ years of experience in Cybersecurity compliance/Risk Management Framework.
• 2+ years of experience with RMF (NIST SP800-53, NIST SP 800-37 DoDI 8510.01), ATO packages, POA&M development, and system categorization is required.
• Baseline and Full Computing Environment Certifications for IAT-II IAW DoD 8570.01-M (Security+ certification) required.
• Must have an active Secret clearance with the ability to obtain TS with SCI eligibility.
• Successfully pass background and drug screening
• 2+ years' experience supporting DoD or federal programs is highly desirable

Responsibilities

• Assist RMF practitioner managing ATO packages, continuous monitoring plans, and eMASS documentation.
• Deep understanding of cybersecurity frameworks, documentation, and technical validation processes, working closely with stakeholders and control assessors to ensure security and compliance.
• Provide weekly reporting to senior task lead.
• Assist in the optimization of current process to streamline approval process with Program Information Security System Manager (P-ISSM) prior to submissions to Authorizing Official (AO).
• Ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure.
• Track timely and high-quality completion of process tasks and milestones, and report on the status of key milestones to senior task lead.
• Assist with overseeing the cybersecurity lifecycle from inception to completion.
• Develop, review, and update documentation to ensure compliance with RMF and Continuous Monitoring requirements.
• Provide direct support to Control Assessors, assisting in the preparation and review of authorization information and documentation for RMF and Continuous Monitoring.
• Maintain and update system security documentation (SSPs, POA&Ms, etc.).
• Evaluate and validate technical processes related to ATO (Authority to Operate) requirements, ensuring alignment with cybersecurity standards.
• Assisting in the preparation and review of authorization information and documentation for RMF and Continuous Monitoring.
• Assist with eMASS package completion and maintenance, including artifacts, self-assessments, and asset management.
• Conduct Security Tests & Evaluations (ST&E) and risk assessments.
• Review project schedules, requirements, and risk assessments, offering recommendations to program stakeholders to enhance security posture.
• Assist with the security plans, as well as assessment reports, plans of action and milestones for remediation. Defines criticality or sensitivity of systems, performs categorization calculations, and recommends corrective action.
• Develop security plans, as well as assessment reports, plans of action, and milestones for remediation. Defines criticality or sensitivity of systems, performs categorization calculations, and recommends corrective action.
• Recommend baseline security controls, assess changes in controls, and coordinate changes to security authorizations.
• Conduct evaluations to verify that design and implementation meet requirements.
• Confirm that all necessary supporting documents (e.g., Incident Response Plan, Configuration Management Plan, Contingency Plan) are present, complete, and have been reviewed and approved.
• Confirm that every finding is identified and tracked in the POA&M. Ensure each POA&M item has a realistic mitigation strategy, defined resources, and a scheduled completion date.
• Assist with the preparation of test plans and conduct security control testing IAW with NIST SP800-53, DoDI 8510.01, NIST SP 800-37 Rev. 2
• Other duties as assigned

Skills

RMF Experience

NIST SP 800-53

ATO Packages

Cybersecurity

DoD/Federal Programs

Education

Bachelor's degree in STEM/IT

Tools

eMASS

Xacta

AWS

Azure

Job description

Chenega MIOS in Huntsville, AL seeks an RMF Analyst II to oversee RMF tasks and support ATO activities for Army programs. The role involves developing system security documentation, coordinating with control assessors, and ensuring compliance across documentation and testing stages.

The analyst will manage eMASS activities, conduct ST&E, and track milestones while coordinating with senior leadership. A Secret clearance with TS eligibility is required.