RMF Cyber Security Analyst – ATO Readiness

ManTech; Stafford (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

MANTECH is seeking a motivated Cyber Security Analyst to support the Marine Corps Systems Command contract in Quantico, VA. The role conducts RMF-based analysis to achieve an Authority to Operate on systems within a DoD environment.

The candidate will prepare SSPs/POA&Ms, review security implementations, and stay current with FISMA and NIST standards. A Secret clearance is required, with potential TS/SCI eligibility, and duties include documentation updates.

Qualifications

• Bachelor’s degree and at least 3 years of related cybersecurity experience.
• Must hold DoD 8140 at an intermediate or advanced level (CASP+CE, Security+, CISSP, or CISM).
• Experience with NIST guidelines, RMF, CSF, EO/OMB memorandums, DoD architectures and risk management.

Responsibilities

• Ensure system documentation reflects current security configurations, data flows, interconnections, ports, protocols and services.
• Perform compliance reviews to verify conformance with federal requirements (EO, OMB, NIST, FIPS).
• Analyze security implementations across people, processes, and technologies; identify gaps and propose solutions.
• Assist in preparing documentation: SSPs, POA&Ms, ARs, CSSs, and other A&A artifacts.
• Research evolving FISMA requirements and provide actionable recommendations.
• Update GRC SharePoint sites with documents, approvals, and access controls.

Skills

Cybersecurity

Analytical thinking

Communication skills

Education

Bachelor’s degree

Job description

MANTECH is seeking a motivated Cyber Security Analyst to support the Marine Corps Systems Command contract in Quantico, VA. The role conducts RMF-based analysis to achieve an Authority to Operate on systems within a DoD environment.

The candidate will prepare SSPs/POA&Ms, review security implementations, and stay current with FISMA and NIST standards. A Secret clearance is required, with potential TS/SCI eligibility, and duties include documentation updates.