RMF Cyber Security Analyst - 306210

DNI (Delaware Nation Industries); Virginia Beach (VA); Vor Ort; USD 110.000 - 115.000; Vollzeit

Benefits dieser Stelle

Covers 100% of employee premiums (Medi

Matching 401K

Short- and Long-Term Disability

Pet Insurance

Professional Development Reimbursement

Parking & Transit benefits

Zusammenfassung

Delaware Nation Industries is supporting NSWCDD DNA by providing RMF accreditation support for networked systems, preparing ATO packages and related documentation in line with DoD/NIST guidance.

The RMF Analyst will coordinate with ISSOs, maintain eMASS records, review STIGs, and ensure compliance with NIST SP 800-37 and 800-53 rev 4/5, while identifying security risks and assisting in remediation.

Qualifikationen

• DoD Top Secret clearance required.
• 5+ years of experience in cyber security.
• Cyber security workforce level IAM II/III CASP, CISM, or CISSP required.
• Bachelor Degree or Equivalent Work Experience.
• Familiarity with NIST SP 800-series with emphasis on SP 800-37 and 800-53 rev 4/5.
• Forensics analysis familiarity.
• Experienced STIG reviewer.
• Microsoft Visio and Microsoft Project user.

Aufgaben

• Monitor and assess information security management, architecture, regulations, and controls (FIPS, NIST, DISN CPG, Navy RPG, Navy Testing Guidance).
• Assess proposed information security management and security architecture, regulations, and controls (FIPS, NIST, DISN CPG, Navy RPG, Navy Testing Guidance).
• Maintain regular meetings/notes with RDT&E CORE/LAB managers and ISSOs to align on ISSM requirements and gather needs and trends.
• Maintain records in the Enterprise Mission Assurance Support Service (eMASS).
• Evaluate technical testing from ACAS scans, STIG reviews, eMASSter, and related tools using NAVSEA/DoD-approved toolsets.
• Monitor security access, passwords, badges, log-ins to keep sites/systems secure.
• Use firewalls and information security standards to protect the organization.
• Perform security assessments, vulnerability testing and risk analysis.
• Conduct security audits internal and external.
• Identify the cause of security breaches.

Kenntnisse

Cyber security

RMF accreditation

ISSM liaison

Documentation

Risk analysis

NIST standards

Forensics

STIG reviewer

Visio

MS Project

Ausbildung

Bachelor's degree

Tools

eMASS

FMATS

ACAS

RedSeal

Carbon Black

Jobbeschreibung

Delaware Nation Industries is supporting the Naval Surface Warfare Center Dahlgren Division Dam Neck Activity (NSWCDD DNA). We are providing enterprise management and technical support of the Naval Surface Warfare Center Dahlgren Division Dam Neck Activity (NSWC DD DNA) by providing assistance in policy, procedures, seat refresh, engineering/technical solutions, ordering to Next Generation Enterprise Network (NGEN) and the Naval Networking Environment (NNE) strategy.

Job Summary

The RMF Analyst will assist in developing RMF accreditation packages and assist in maintaining Authorization to Operate (ATO) certifications for networked systems and applications used by the organization. The RMF Analyst will assist in the development of information system documentation and the provision of a designated set of common controls for the authorization package, including the executive summary, system security plan, privacy plan, security control assessment, privacy control assessment, and any relevant plans of action and milestones. This system certification documentation must comply with DoD and Civilian Agency policy focused on NIST 800-37, NIST 800-53 rev 4.

Responsibilities

• Monitor and assess existing Information Security Management and Security Technical Architecture, regulations, and controls (FIPS, NIST, DISN Connection Process Guide(CPG), Navy RMF Process Guide (RPG), Navy Testing Guidance)
• Assess proposed Information Security Management and Security Technical Architecture, regulations, and controls (FIPS, NIST, DISN CPG, Navy RPG, Navy Testing Guidance)
• Maintain regular meetings/notes and informal dialog with RDT&E CORE/LAB managers and ISSOs to keep them abreast of upcoming Information System Security Manager (ISSM) requirements and to gather specifics on their capability and core support requirements and trends
• Maintain records in the Enterprise Mission Assurance Support Service (eMASS)
• Evaluating technical testing from Assured Compliance Assessment Solution (ACAS) scans, Evaluate STIG, eMASSter), and Security Technical Implementation Guide Viewer tool using FMATS or other NAVSEA or DoD-approved toolset
• Monitor security access, passwords, badges, log-ins, to keep a site or system safe
• Use firewalls and information security standards to keep their organization secure
• Perform security assessments, vulnerability testing and risk analysis
• Conduct security audits internal and external
• Identify the cause of security breaches

Requirements

• DoD Top Secret Security Clearance
• 5+ Years of Experience in Cyber Security
• Cyber Security Workforce level IAM II/III CASP,CISM, or CISSP required
• Bachelor Degree or Equivalent Work Experience
• Familiarity with NIST IT Security Special Publication (SP) 800 Series with emphasis on NIST SP 800-37 and NIST SP 800-53 rev 4/5
• Forensics analysis familiarity
• Experienced STIG reviewer
• Microsoft Visio and Microsoft Project user

Desired

• Navy Qualified Validator (NQV) Level II
• Familiarity with ACAS, RedSeal, and Carbon Black
• Familiarity with the Vulnerability Remediation Asset Manager (VRAM) web tool
• Familiarity with the Continuous Monitoring and Risk Scoring (CMRS) web tool

Benefits

• Covers 100% of employee benefit premiums, including Medical (PPO or HDHP Option), Vision, Dental
• Matching 401K
• Short- and Long-Term Disability
• Pet Insurance
• Professional Development/Education Reimbursement
• Parking and Transit Benefits for NY, NJ, ATL, and DC Metro areas

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

Salary Compensation: $110,000-$115,000