RMF Cyber Security Analyst - Onsite Quantico (Secret)

Nationwide IT Services, Inc.; Quantico (VA); On-site; USD 100,000 - 110,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) with employer match

Paid holidays

PTO

Commuter benefits

Educational reimbursement

Pet insurance

Job summary

Nationwide IT Services is seeking a RMF Cyber Security Analyst to support DoD RMF activities at Quantico, VA. The role requires active Secret clearance and DoD RMF/IAT II certification.

You will coordinate with project teams, manage security packages in eMASS, and oversee vulnerability remediation across systems. Responsibilities include driving RMF steps, maintaining documentation, and communicating risk and status to leadership.

Qualifications

• Requires active Secret clearance and RMF familiarity.
• Experience with DoD cyber security policies and NIST SP 800-53.
• DoD 8570-M/8140-M IAT Level II required.

Responsibilities

• Interface with Project Managers and ISSMs on RMF issues.
• Drive the seven RMF steps (Prepare, Categorize, Select, Implement, Assess, Authorize, Monitor).
• Create and maintain security packages in eMASS.
• Review vulnerability scans and coordinate remediation.
• Bridge engineers, ISSOs, and leadership on security needs.
• Track POA&M, RMF status, and ATOs.
• Prepare A&A documentation for RMF reporting.
• Perform ISSO Type duties per DoD 8510/8500.

Skills

Secret clearance

DoD 8570-M/8140-M IAT Level II

NIST SP 800-53 knowledge

DoD A&A Process

eMASS experience

Vulnerability scanning (ACAS/Nessus)

RMF lifecycle knowledge

POA&M tracking

Education

Bachelor’s degree in information technology/Information Systems Management/Cyber Security

Tools

ACAS

Nessus

eMASS

Job description

Nationwide IT Services is seeking a RMF Cyber Security Analyst to support DoD RMF activities at Quantico, VA. The role requires active Secret clearance and DoD RMF/IAT II certification.

You will coordinate with project teams, manage security packages in eMASS, and oversee vulnerability remediation across systems. Responsibilities include driving RMF steps, maintaining documentation, and communicating risk and status to leadership.