RMF Cybersecurity Analyst

CACI International Inc; New Jersey; On-site; USD 87,000 - 182,000; Full time

Job summary

CACI International Inc seeks an RMF Cybersecurity Analyst to secure Naval Surface Warfare Center weapon systems at Picatinny Arsenal, NJ. You will implement RMF, conduct security assessments, and ensure Navy cybersecurity policy compliance.

Work with engineers, program managers, and security teams to identify risks, perform vulnerability assessments, and recommend security enhancements.

This role requires US citizenship and an active Secret clearance; travel up to 10%.

Qualifications

• U.S. citizenship required.
• Active Secret security clearance or ability to obtain.
• Bachelor’s degree or 5 years Navy/DoD experience.
• Experience with RMF and NIST SP 800-53.
• Knowledge of cybersecurity principles, controls and risk management.
• Experience with cybersecurity compliance and DoD processes.
• Experience maintaining eMASS documentation.
• Strong written and oral communications.
• MS Office proficiency (Excel, Word, PowerPoint).
• Understanding of ATO and continuous monitoring.

Responsibilities

• Manage the security authorization lifecycle per RMF.
• Coordinate activities to obtain MA/ATO approvals.
• Assess and track NIST SP 800-53 controls and compliance.
• Input and maintain documentation in eMASS.
• Develop/update SSPs, SAPs, SARs, POA&Ms and risk assessments.
• Support continuous monitoring and remediation tracking.
• Provide guidance to owners, engineers and security stakeholders.
• Review vulnerability findings and evidence for remediation.

Skills

RMF

Security controls

Vulnerability management

Risk management

Written/verbal comms

Documentation

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

eMASS

ACAS

STIGs

Job description

Job Title: RMF Cybersecurity Analyst
Job Category: Information Technology
Time Type: Full time
Minimum Clearance Required to Start: Secret
Employee Type: Regular
Percentage of Travel Required: Up to 10%
Type of Travel: Continental US
* * *

The Opportunity

CACI is seeking a RMF Cybersecurity Analyst to play a critical role in ensuring the cybersecurity of multiple U.S. Navy gun weapon systems in support of the Naval Surface Warfare Center detachment at Picatinny Arsenal, New Jersey. This position involves implementing and maintaining Risk Management Framework (RMF) processes across various weapon systems to protect against cyber threats. Key responsibilities include: conducting security assessments, developing security plans, and ensuring compliance with U.S. Navy cybersecurity policies. The analyst will work closely with system engineers, program managers, and cybersecurity teams to identify and mitigate risks, perform vulnerability assessments, and recommend security enhancements.

Responsibilities

• Manage the security authorization lifecycle for one or more information systems in accordance with Federal Risk Management Framework (RMF) requirements.
• Coordinate activities required to obtain and maintain program office Authorization to Operate (ATO) approvals.
• Assess and track implementation of NIST SP 800-53 security controls and associated compliance requirements.
• Input and maintain all documentation in Enterprise Mission Assurance Support Service (eMASS).

Develop, Review, Update, And Maintain Authorization Package Documentation, Including

• System Security Plans (SSPs)
• Security Assessment Plans (SAPs)
• Security Assessment Reports (SARs)
• Plan of Action and Milestones (POA&Ms)
• Risk Assessments
• Continuous Monitoring documentation
• Security-related policies and procedures
• Security Technical Implementation Guides (STIGs)
• Assured Compliance Assessment Solution (ACAS)
• IV&V (Independent, Verification and Validation)
• Manage POA&M activities by tracking findings, monitoring remediation progress, validating corrective actions, and supporting closure efforts.
• Provide technical guidance and compliance recommendations to system owners, engineers, administrators, and security stakeholders to facilitate POA&M remediation and closure.
• Coordinate with technical teams to gather evidence supporting security control implementation and compliance requirements.
• Review vulnerability scan results, assessment findings, and security documentation to identify compliance gaps and areas requiring remediation.
• Support continuous monitoring activities by tracking security posture, compliance status, and ongoing control effectiveness.
• Participate in security assessments, audits, and compliance reviews conducted by internal and external stakeholders.
• Assist in the development of risk mitigation strategies and recommendations for addressing identified security weaknesses.
• Track authorization milestones, compliance deadlines, and remediation activities to ensure timely completion.
• Communicate compliance status, risks, findings, and recommendations to both technical and non-technical stakeholders.
• Support audits and reporting activities related to cybersecurity requirements and organizational security programs.

Qualifications

Required:

• U.S. Citizenship.
• Active Secret Security Clearance, or the ability to obtain one.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Sciences or a related field, or minimum 5 years of closely related experience working with Navy or DoD weapon systems, equipment, or programs.
• Experience working with the NIST Risk Management Framework (RMF).
• Understanding of cybersecurity principles, security controls, vulnerability management, and risk management concepts.
• Experience supporting cybersecurity compliance, security authorization, risk management, or information security programs.
• Experience in maintaining all documentation in the DoD Enterprise Mission Assurance Support Service (eMASS).
• Subject matter expertise with NIST SP 800-53 security controls and cybersecurity compliance requirements.
• Experience supporting the development, maintenance, or review of authorization package documentation, including SSPs, SARs, POA&Ms, and Risk Assessments.
• Understanding of the Authorization to Operate (ATO) process and continuous monitoring requirements.
• Experience tracking and managing POA&M findings through remediation and closure.
• Ability to review technical security information and translate findings into compliance documentation and actionable recommendations.
• Strong organizational skills with the ability to manage multiple systems, priorities, and compliance activities simultaneously.
• Strong written and verbal communication skills, including the ability to develop and review formal security documentation.
• Proficiency with MS Office applications, Excel, Word, and PowerPoint.

Desired

• Demonstrated experience providing cyber security support for complex military systems, preferably U.S. Navy Gun Weapon Systems.
• Relative Certifications such as COMPTIA Security +, CISCO Certified Network Associate (CCNA).

What You Can Expect

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The Proposed Salary Range For This Position Is

$86,600 - $181,800

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.