RMF Cybersecurity Analyst

Cybersecurity Jobs; Rockaway Township (NJ); On-site; USD 87,000 - 182,000; Full time

Job summary

Cybersecurity Jobs in New Jersey is seeking an RMF Cybersecurity Analyst to implement and maintain RMF processes for Navy weapon systems. This onsite role supports Picatinny Arsenal, NJ, focusing on authorization activities, compliance, vulnerability assessment support, continuous monitoring, and security documentation in eMASS.

The ideal candidate has a Bachelor’s degree or 5+ years DoD/Navy experience, strong knowledge of NIST SP 800-53 controls, and proven ability to produce SSP/SAR/POA&M

Qualifications

• Experience implementing RMF for DoD/Navy weapon systems.
• Ability to develop and review SSPs, SARs, POA&Ms and risk assessments.

Responsibilities

• Manage the security authorization lifecycle for information systems per RMF requirements.
• Coordinate Authorization to Operate (ATO) approvals with program offices.
• Assess and track NIST SP 800-53 security controls and related compliance.
• Input and maintain documentation in eMASS.
• Manage POA&Ms by tracking findings and remediation progress.

Skills

RMF knowledge

DoD/Navy experience

Authorization to Operate

eMASS familiarity

NIST SP 800-53

POA&M management

Vulnerability assessment

Documentation

MS Office

Communication

Education

Bachelor’s degree in Cybersecurity/IT/CS

5+ years Navy/DoD experience

Tools

eMASS

RMF

ACAS

STIGs

SSPs

SARs

POA&Ms

IV&V

MS Office

Job description

CA CI is seeking an RMF Cybersecurity Analyst to implement and maintain Risk Management Framework (RMF) processes for multiple U.S. Navy gun weapon systems. This onsite role supports the Naval Surface Warfare Center detachment at Picatinny Arsenal, NJ and focuses on managing authorization activities, compliance, vulnerability assessment support, continuous monitoring, and security documentation in eMASS.

What you will do

• Manage the security authorization lifecycle for one or more information systems in accordance with Federal Risk Management Framework (RMF) requirements.
• Coordinate activities to obtain and maintain program office Authorization to Operate (ATO) approvals.
• Assess and track implementation of NIST SP 800-53 security controls and associated compliance requirements.
• Input and maintain documentation in Enterprise Mission Assurance Support Service (eMASS).
• Manage POA&M activities by tracking findings, monitoring remediation progress, validating corrective actions, and supporting closure efforts.
• Provide technical guidance and compliance recommendations to system owners, engineers, administrators, and security stakeholders to support POA&M remediation and closure.
• Coordinate with technical teams to gather evidence supporting security control implementation and compliance requirements.
• Review vulnerability scan results, assessment findings, and security documentation to identify compliance gaps and remediation needs.
• Support continuous monitoring by tracking security posture, compliance status, and ongoing control effectiveness.
• Participate in security assessments, audits, and compliance reviews with internal and external stakeholders.
• Assist in the development of risk mitigation strategies and recommendations for security weaknesses.
• Track authorization milestones, compliance deadlines, and remediation activities to support timely completion.
• Communicate compliance status, risks, findings, and recommendations to both technical and non-technical stakeholders.
• Support audits and reporting activities related to cybersecurity requirements and organizational security programs.

Required qualifications

• U.S. Citizenship.
• Active Secret Security Clearance, or the ability to obtain one.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Sciences, or related field; or minimum 5 years of closely related experience working with Navy or DoD weapon systems, equipment, or programs.
• Experience working with NIST RMF.
• Understanding of cybersecurity principles, security controls, vulnerability management, and risk management concepts.
• Experience supporting cybersecurity compliance, security authorization, risk management, or information security programs.
• Experience maintaining documentation in DoD Enterprise Mission Assurance Support Service (eMASS).
• Subject matter expertise with NIST SP 800-53 security controls and cybersecurity compliance requirements.
• Experience developing, maintaining, or reviewing authorization package documentation, including SSPs, SARs, POA&Ms, and Risk Assessments.
• Understanding of the Authorization to Operate (ATO) process and continuous monitoring requirements.
• Experience tracking and managing POA&M findings through remediation and closure.
• Ability to review technical security information and translate findings into compliance documentation and actionable recommendations.
• Strong organizational skills to manage multiple systems, priorities, and compliance activities simultaneously.
• Strong written and verbal communication skills, including the ability to develop and review formal security documentation.
• Proficiency with MS Office applications, including Excel, Word, and PowerPoint.

Authorization package documentation

The role includes developing, reviewing, updating, and maintaining authorization package documentation, including:

• System Security Plans (SSPs)
• Security Assessment Plans (SAPs)
• Security Assessment Reports (SARs)
• Plan of Action and Milestones (POA&Ms)
• Risk Assessments
• Continuous Monitoring documentation
• Security-related policies and procedures
• Security Technical Implementation Guides (STIGs)
• Assured Compliance Assessment Solution (ACAS)
• IV&V (Independent, Verification and Validation)

Technologies

• Risk Management Framework (RMF)
• NIST SP 800-53
• Enterprise Mission Assurance Support Service (eMASS)
• Assured Compliance Assessment Solution (ACAS)
• IV&V (Independent, Verification and Validation)
• MS Office (Excel, Word, PowerPoint)

Desired qualifications

• Demonstrated experience providing cyber security support for complex military systems, preferably U.S. Navy Gun Weapon Systems.
• Relative certifications such as COMPTIA Security+ and CISCO Certified Network Associate (CCNA).

Logistics and compensation

• Location: Picatinny Arsenal, NJ (onsite)
• Travel: Up to 10%, Continental US
• Pay range: USD 86,600 - 181,800 per year
• Minimum clearance required to start: Secret

What you can expect

• A culture of integrity
• An environment of trust
• A focus on continuous growth