RMF Cyber Security Analyst, Senior at Nationwide IT Services Quantico, VA

Comunidade Metodista; Quantico (VA); On-site; USD 85,000 - 130,000; Full time

Job summary

Nationwide IT Services is seeking a Senior RMF Cyber Security Analyst to support DoD RMF programs in Quantico, VA, on-site. The role requires an Active Secret clearance and 5+ years of hands-on cybersecurity experience, including DoD A&A, DISA STIGs, and NIST SP 800-53.

You will ensure RMF controls, manage ATOs, and produce documentation such as SSPs and SA&A packages, contributing to ongoing risk assessments and continuous monitoring efforts.

Qualifications

• Active Secret clearance required.
• 5+ years of hands-on cybersecurity experience, including DoD A&A processes and compliance.
• Bachelor’s degree in IT, Cybersecurity, or related field, or equivalent experience.
• DoD 8570-M/8140-M IAT Level II certification preferred.

Responsibilities

• Collaborate with program managers and ISSMs on enclave and system cybersecurity issues.
• Track and report POA&Ms, RMF status, Annual Assessments, ATOs, and Continuous Monitoring.
• Ensure documentation supports ATOs, including SSPs and SA&A packages.
• Conduct security control assessments and risk evaluations for authorizations.
• Provide risk mitigation strategies and QA on assessments and documentation.
• Review and update cybersecurity documentation per DoD and DSS mandates.
• Assist with Mission Assurance, policy development, and cybersecurity research.

Skills

Cybersecurity experience

DoD RMF/a&A processes

Risk assessment & mitigation

Documentation & compliance

Education

Bachelor’s degree in IT or Cybersecurity

Tools

DISA STIGs

NIST SP 800-53

DoD eMASS

System Security Plans (SSP) & SA&A packages

Job description

RMF Cyber Security Analyst, Senior job at Nationwide IT Services. Quantico, VA.

RMF Cyber Security Analyst, Senior

Quantico, VA (On-Site)

Security Clearance

Active Secret

Overview

Nationwide IT Services (NIS) is seeking a Cybersecurity Analyst to support programs, systems, and enclaves by implementing, monitoring, and enforcing cybersecurity policies and procedures in accordance with DoD Risk Management Framework (RMF). The analyst will perform day-to-day security operations, IT security control validations, configuration management, and risk assessments, ensuring that systems maintain compliance and an optimal operational security posture.

Responsibilities

• Collaborate with Program Managers, SMEs, and ISSMs on enclave and system cybersecurity issues.
• Track and report POA&Ms, RMF status, Annual Assessments, ATOs, and Continuous Monitoring activities.
• Ensure documentation compliance to support ATOs, including Systems Security Plans (SSPs) and Security Assessment & Authorization (SA&A) packages.
• Conduct security control assessments and risk evaluations to support authorizations.
• Provide risk mitigation strategies and quality assurance on assessments and documentation.
• Review and update cybersecurity documentation by DoD and DSS mandates.
• Assist with Mission Assurance, policy development, and research on cybersecurity topics.

Qualifications

• Active Secret clearance.
• Bachelor’s degree in IT, Cybersecurity, or related field, or equivalent experience.
• 5+ years of hands-on cybersecurity experience, including DoD A&A processes, DISA STIGs, NIST SP 800-53, IA Technical Framework, and applicable DoD policies. Experience with DoD or eMASS preferred.
• 1+ year of experience with security tools, hardware/software security, communication protocols, and the Microsoft Office suite.
• Must meet DoD 8570-M/8140-M IAT Level II (e.g., Security+ CE).

About NIS

Nationwide IT Services is a CVE-verified Service-Disabled Veteran-Owned Small Business delivering IT and management consulting solutions.

Benefits

Medical, dental, and vision insurance; life and disability coverage; 401(k) with employer match; PTO; paid holidays; commuter benefits; EAP; educational reimbursement.

Equal Opportunity Employer

NIS provides EEO to all qualified applicants without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, genetics, disability, or protected veteran status.