RMF Cybersecurity Analyst

ASRC Federal; Virginia, Northern (IL, KY); Hybrid; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health care

Dental

Vision

Life insurance

401(k)

Education assistance

Paid time off

Job summary

ASRC Federal is hiring a Cybersecurity Analyst to support the DCSA program in the Quantico, VA area. The role is primarily telework with on-site presence two days per week at Quantico MC Base, VA, and may adapt with government direction.

The analyst will manage RMF support across programs, develop security artifacts, and coordinate POCs for government review. The position requires RMF, STIGs, and DoD policy knowledge, with two+ years RMF experience, and a bachelor's degree in Cybersecurity or

Qualifications

• Knowledge of RMF, STIGs, and eMASS or similar (Xacta/CSAM)
• Familiarity with DISA STIGs, RMF, NIST SP 800-53, Vulnerability tools and DoD policies
• Experience developing cybersecurity documentation (POAM, eMASS submissions, SA&A)
• Ability to prepare and review SSPs and A&A packages under RMF
• Experience producing DoD and federal governance documentation
• Proven writing skills for enterprise-level SOPs and reports
• At least 2 years of RMF experience in a cyber security context

Responsibilities

• Support RMF across multiple programs, systems, or enclaves
• Propose, coordinate, implement, and enforce cybersecurity policies and standards
• Develop and maintain cybersecurity documentation (SSPs, POAMs, SA&A)
• Prepare government-facing documentation for reviews, including A&A packages
• Writings and reports for high-level officials and stakeholders

Skills

RMF knowledge

STIGs knowledge

DoD policy knowledge

Technical writing

Documentation

Risk management

Education

Bachelor's Degree in Cybersecurity / Information Systems

Tools

eMASS

Xacta

CSAM

Job description

Posted Thursday, August 27, 2026 at 4:00 AM

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are atop veteran employer and Certified Great Place to Work

ASRC Federal is actively hiring a Cybersecurity Analyst in support of our DCSA program based out of Quantico VA.

This is primarily a Telework position with a requirement to be onsite at least two (2) days a week at Quantico Marine Corps Base VA. Subject to change based on government direction.

As a Cybersecurity Analyst you will play a crucial role in ensuring the cyber security and compliance of the Defense Counterintelligence and Security Agency (DCSA). You will be responsible for managing the Risk Management Framework (RMF) support for multiple programs, systems, or enclaves by aiding in proposing, coordinating, implementing, and enforcing information systems or enclave cybersecurity policies, standards, and methodologies.

BASIC QUALIFICATIONS:

• Knowledge of Risk Management Framework (RMF), STIGs and eMASS or similar e.g., Xacta or CSAM
• Knowledge of DISA Security Technical Information Guides, RMF, NIST SP 800-53, Vulnerability Tools, and other applicable DoD Cybersecurity policies
• Experience in developing cybersecurity documentation, Plan of Actions & Milestones (POAM), enterprise mission assurance support service (eMASS) submissions, and system security engineering efforts.
• Skilled in preparing and reviewing documentation to include Systems Security Plans (SSPs) and Security Assessment & Authorization (SA&A) packages in accordance with DoD Risk Management Framework (RMF) procedures
• Experienced in developing, updating, and providing for Government review, all DoD and other federal agency-specific documentation specified in Government A&A Framework and DoDI 8510.01, as applicable
• Provided Cyber IT analysis results and test reports for government approval
• Possesses strong writing skills; experience preparing enterprise-wide SOPs, reports for high level officials
• At least two (2) years System Level Cybersecurity Risk Management Framework (RMF) Experience

EDUCATION REQUIREMENTS:

• Bachelor’s Degree, or equivalent experience in Cybersecurity, and/or Information Systems Management, Information Technology

CERTIFICAITON(S):

• 8570 IAM/IAT Level I or required (e.g., A+CE, Network+ CE, SSCP, CCNA-Security, CAP, GSLC, Security+ CE or higher level certification)

CLEARANCE LEVEL:

• Active Secret Required and eligibility for TS

WORK ENVIRONMENT AND PHYSICAL DEMANDS:

• This is primarily a Telework position with a requirement to be onsite at least two (2) days a week.Subject to change based on government direction.
• If alternate worksite is other than DCSA facilities or corporate office space, must have the reliable ability to communicate over voice (cell phone preferred) and stable, capable internet connection.
• Must speak English well enough to communicate complex technical ideas to a diverse customer both verbally and in written form.

We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include

• health care
• dental
• vision
• life insurance
• 401(k)
• education assistance
• paid time off including PTO, holidays, and any other paid leave required by law

The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.

EEO Statement

ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.