RMF Cyber Security Analyst Senior

Saic; Quantico (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

SAIC is seeking a Senior RMF Cyber Security Analyst to support DCSA. The role focuses on proposing, coordinating, implementing, and enforcing information systems cybersecurity policies under RMF.

You will lead day-to-day security operations, perform risk assessments, and prepare SSPs/SA&A packages, ensuring compliance with DoD RMF and ATO requirements.

Qualifications

• Active Secret clearance required.
• Bachelor's degree in IT, Cyber Security, or related field.
• 5+ years hands-on cyber security experience.
• Knowledge of DoD RMF, NIST SP 800-53, and DoD/A&A processes.
• DoD 8570-M/IAT II level certification.
• Experience with DoD/system security tools and MS Office.

Responsibilities

• Lead RMF lifecycle steps: Prepare to Monitor.
• Create/maintain security packages in eMASS.
• Review vulnerability scans (ACAS/Nessus) and coordinate remediation.
• Bridge technicians, ISSOs, and leadership on security issues.
• Maintain POA&Ms and RMF/ATO documentation.
• Support RMF reporting and policy development.

Skills

Secret clearance

Bachelor's degree in IT/Cyber

5+ years cyber security

NIST SP 800-53 / RMF

DoD 8570-IAT II

eMASS familiarity

Education

Bachelor's degree or related field

Tools

eMASS

ACAS/Nessus

A&A / SSP documentation

Job description

Description

Make a difference for national security by joining a team of dedicated IT professionals who will sustain, modernize and transform the enterprise IT capabilities for theDefense Counterintelligence and Security Agency (DCSA). The Air Force, Space & Intel Business Group (AFSI) of SAIC is seeking a RMF Cyber Security Analyst Senior to support a transformational infrastructure program for DCSA.

SAIC is proud to be supporting DCSA in safeguarding our nation’s information. DCSA is the designated oversight authority on the accreditation of classified facilities, information systems, and the insider threat program. This involves security oversight of more than 10,000 companies and approximately 13,000 facilities involved in classified work throughout the DoD and 31 Federal agencies.

Specifically, on the DCSA One IT program, SAIC will provide an enterprise IT solution that delivers highly secure and adaptable IT infrastructure, provide customer support, and cutting-edge technologies that support operations and advance the DCSA mission under a single IT environment (i.e., One IT).

Job Description

The RMF Cyber Security Analyst Senior will provide support for a program, an organization, system, or an enclave; provides support for proposing, coordinating, implementing, and enforcing information systems or enclave cybersecurity policies, standards, and methodologies; maintains operational security posture for an information system, program, or enclave to ensure cybersecurity standards, and procedures are established and followed; performs day-to-day security operations of the system or enclave; perform IT security control assessments; provide configuration management (CM) for information system security software, hardware, and firmware; manage changes to system and assess the security impact of those changes; prepare and review documentation to include Systems Security Plans (SSPs) and Security Assessment & Authorization (SA&A) packages in accordance with DoD Risk Management Framework (RMF) procedures.

Duties

• Interface with Project/Program Managers, Subject Matter Experts (SME) and Information System Security Managers (ISSM) on Major Application / General Enclave issues and updates.
• Drive the 7 steps of the RMF lifecycle (Prepare, Categorize, Select, Implement, Assess, Authorize, and Monitor).
• Create and maintain security packages in eMASS.
• Review vulnerability scan results (using tools like ACAS or Nessus) and coordinate remediation.
• Act as a bridge between technical engineers, Information System Security Officers (ISSOs), and executive leadership.
• Track and report on Plan of Action and Milestone (POA&M) items; RMF Status, Annual Assessments, Authority to Operate (ATO) and Continuous Monitoring actions.
• Responsible for documentation compliance and review to ensure programs receive ATOs for multiple systems.
• Prepare briefs and A&A documents for approval in support of RMF reporting and policy development.
• Perform ISSO Type duties as defined in DoD 8510 & 8500.
• Provide risk mitigation strategies.
• Perform quality checks on POA&Ms, risk assessments, and documentation.
• Conduct security control and risk assessments to support authorizations.
• Review existing documentation bi-annually for accuracy and relevance to current DoD and DCSA mandates.
• Assist with research on cybersecurity items of interest.
• Perform other duties as related to risk management, communication, and assessments.

Qualifications

It is required that the RMF Cyber Security Analyst Senior have the following qualifications:

• Secret clearance.
• Bachelor’s degree in information technology, Information Systems Management, Cyber Security, or some other related field.
• Five (5) or more years of hands‑on technical Cyber Security Experience. Additional years of experience may be considered in lieu of a degree.
• Knowledge with DISA Security Technical Information Guides, DoD A&A Process, NIST SP 800-53, IA Technical Framework, and applicable DoD Cyber Security / Risk Management policies (must have DoD or eMASS experience).
• At least one (1) year of the knowledge of current security tools, hardware/software security implementation, communication protocols, and Microsoft Office suite.
• Must meet DoD 8570-M/8140-M IAT Level II.

Target salary range: $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.