RMF Cybersecurity Analyst

ASRC Federal; Virginia; Hybrid; USD 90,000 - 120,000; Full time

Job summary

ASRC Federal is actively hiring a RMF Cybersecurity Analyst in support of our DCSA program based out of Quantico VA. This is primarily a Telework position with onsite at least two days a week at Quantico Marine Corps Base VA.

You will manage RMF support across programs, aiding in proposing, coordinating, implementing, and enforcing DoD cybersecurity policies. The role requires RMF knowledge, SSP/SA&A preparation, and DHS/DoD-compliant documentation.

Qualifications

• Knowledge of RMF, STIGs and eMASS or similar e.g., Xacta or CSAM.
• Knowledge of DISA Security Technical Information Guides, RMF, NIST SP 800-53, Vulnerability Tools, and other applicable DoD Cybersecurity policies.
• Experience in developing cybersecurity documentation, POAMs, eMASS submissions, and system security engineering efforts.
• Skilled in preparing and reviewing SSPs and SA&A packages in DoD RMF procedures.
• Experience in developing, updating, and providing DoD and other agency documentation for Government review.
• Provided Cyber IT analysis results and test reports for government approval.
• Strong writing skills; experience preparing enterprise-wide SOPs and high-level reports.

Responsibilities

• Will contribute to RMF support for multiple programs and systems.
• Coordinate and enforce information systems cybersecurity policies and methodologies.
• Prepare and review documentation such as SSPs and SA&A packages for DoD RMF.
• Develop and update Government-facing documentation as required.

Skills

RMF knowledge

eMASS/Xacta/CSAM knowledge

DISA STIGs knowledge

NIST SP 800-53 knowledge

Vulnerability tools

DoD cybersecurity policies

Documentation writing

SSP preparation

SA&A packages

Government review documentation

Education

Bachelor’s Degree in Cybersecurity/Information Systems/IT

Tools

eMASS

Xacta

CSAM

Job description

ASRC Federal is actively hiring a RMF Cybersecurity Analyst in support of our DCSA program based out of Quantico VA.

This is primarily a Telework position with a requirement to be onsite at least two (2) days a week at Quantico Marine Corps Base VA. Subject to change based on government direction.

As a RMF Cybersecurity Analyst you will play a crucial role in ensuring the cyber security and compliance of the Defense Counterintelligence and Security Agency (DCSA). You will be responsible for managing the Risk Management Framework (RMF) support for multiple programs, systems, or enclaves by aiding in proposing, coordinating, implementing, and enforcing information systems or enclave cybersecurity policies, standards, and methodologies.

BASIC QUALIFICATIONS:

Candidates should demonstrate the following:

• Knowledge of Risk Management Framework (RMF), STIGs and eMASS or similar e.g., Xacta or CSAM
• Knowledge of DISA Security Technical Information Guides, RMF, NIST SP 800-53, Vulnerability Tools, and other applicable DoD Cybersecurity policies
• Experience in developing cybersecurity documentation, Plan of Actions & Milestones (POAM), enterprise mission assurance support service (eMASS) submissions, and system security engineering efforts.
• Skilled in preparing and reviewing documentation to include Systems Security Plans (SSPs) and Security Assessment & Authorization (SA&A) packages in accordance with DoD Risk Management Framework (RMF) procedures
• Experienced in developing, updating, and providing for Government review, all DoD and other federal agency-specific documentation specified in Government A&A Framework and DoDI 8510.01, as applicable
• Provided Cyber IT analysis results and test reports for government approval
• Possesses strong writing skills; experience preparing enterprise-wide SOPs, reports for high level officials

YEARS’ EXPERIENCE:

• At least two (2) years System Level Cybersecurity Risk Management Framework (RMF) Experience

EDUCATION REQUIREMENTS:

• Bachelor’s Degree, or equivalent experience in Cybersecurity, and/or Information Systems Management, Information Technology

CERTIFICAITON(S):

• 8570 IAM/IAT Level I or required (e.g., A+CE, Network+ CE, SSCP, CCNA-Security, CAP, GSLC, Security+ CE or higher level certification)

CLEARANCE LEVEL:

• Active Secret Required and eligibility for TS

WORK ENVIRONMENT AND PHYSICAL DEMANDS:

• This is primarily a Telework position with a requirement to be onsite at least two (2) days a week.Subject to change based on government direction.

• If alternate worksite is other than DCSA facilities or corporate office space, must have the reliable ability to communicate over voice (cell phone preferred) and stable, capable internet connection.

• Must speak English well enough to communicate complex technical ideas to a diverse customer both verbally and in written form.