RMF Cyber Security Analyst | DoD RMF & ATO Specialist

nationwideitservices; Quantico (VA); On-site; USD 100,000 - 110,000; Full time

Job summary

Nationwide IT Services (NIS) is seeking a RMF Cyber Security Analyst to work 100% on-site at Quantico, VA. The role requires an active Secret clearance, DoD 8570-M/8140-M IAT Level II, and 5+ years of hands-on cyber security experience with RMF, A&A, and NIST SP 800-53.

Expect responsibilities around RMF lifecycle, vulnerability remediation, and security documentation. The analyst will coordinate with ISSOs, SMEs, and project managers, maintain SSPs/SA&A packages, and ensure continuous

Qualifications

• Secret security clearance required.
• Bachelor’s degree in IT/Cyber Security or related field or equivalent experience.
• Minimum 5 years hands-on cyber security experience with DoD policies and RMF processes (DoD A&A, NIST SP 800-53).
• Must have DoD 8570-M/8140-M IAT Level II.
• Knowledge of security tools and Windows/Linux environments.

Responsibilities

• Support RMF lifecycle steps across programs and enclaves.
• Prepare and review RMF documentation (SSPs, SA&A) per RMF procedures.
• Maintain DoD security posture and classify/system categorization.
• Create/maintain security packages in eMASS and track POA&Ms.
• Coordinate remediation after vulnerability scans (ACAS/Nessus).
• Interface with ISSMs, SMEs, and project managers on RMF:** implement, assess, and monitor.

Skills

Secret clearance

5+ years cyber security

IAT Level II (8570/8140)

Education

Bachelor’s degree in IT/Cyber Security or related field

Tools

eMASS

ACAS/Nessus

NIST SP 800-53

Job description

Nationwide IT Services (NIS) is seeking a RMF Cyber Security Analyst to work 100% on-site at Quantico, VA. The role requires an active Secret clearance, DoD 8570-M/8140-M IAT Level II, and 5+ years of hands-on cyber security experience with RMF, A&A, and NIST SP 800-53.

Expect responsibilities around RMF lifecycle, vulnerability remediation, and security documentation. The analyst will coordinate with ISSOs, SMEs, and project managers, maintain SSPs/SA&A packages, and ensure continuous