RMF Cyber Analyst – DoD/Navy Security & ATO

Leidos; Keyport (NJ); On-site; USD 73,000 - 133,000; Full time

Job summary

Leidos in Keyport, WA is seeking a Cybersecurity Analyst to support RMF security and compliance for DoD and Navy information systems enabling UUV OC. You will implement and test security controls, perform vulnerability management, and help sustain an Authorization to Operate.

Collaborate with a technical team to analyze findings, prepare A&A packages, and provide ongoing cybersecurity support to project managers and team leads across assessment, authorization, and operations.

Qualifications

• Bachelor's or Master's degree in a related field with relevant experience, per posting.
• Active Top Secret clearance with SCI eligibility or TS/SCI.
• 3+ years in DoD/Navy cybersecurity, RMF compliance, vulnerability management, and continuous monitoring.
• Hands-on experience with ACAS, IAVM, security control assessments, and A&A/ATO support.
• Knowledge of RMF, STIGs, and DoD/Navy cybersecurity requirements.

Responsibilities

• Implement and test security controls in RMF, STIGs, and applicable DoD/Navy directives while supporting secure system documentation, validation, and testing.
• Conduct ACAS scans, analyze results, and perform IAVM activities to identify, track, and remediate vulnerabilities.
• Support risk identification, mitigation planning, continuous monitoring, and compliance reporting in alignment with Navy SCA guidance.
• Prepare and maintain A&A packages and support activities required to obtain and sustain an Authorization to Operate (ATO).
• Provide day to day cybersecurity support to the Project Manager and Team Leads across system assessment, authorization, and operational sustainment.

Skills

RMF compliance

Vulnerability management

Security testing

Security documentation

Communication

Technical writing

Education

Bachelor's degree

Master's degree

Tools

ACAS

IAVM

RMF

STIGs

Job description

Leidos in Keyport, WA is seeking a Cybersecurity Analyst to support RMF security and compliance for DoD and Navy information systems enabling UUV OC. You will implement and test security controls, perform vulnerability management, and help sustain an Authorization to Operate.

Collaborate with a technical team to analyze findings, prepare A&A packages, and provide ongoing cybersecurity support to project managers and team leads across assessment, authorization, and operations.