RMF Cybersecurity Analyst

DNI (Delaware Nation Industries); Virginia Beach (VA); On-site; USD 110,000 - 160,000; Full time

Job summary

Delaware Nation Industries supports NSWCDD DNA by delivering enterprise management and technical support across RMF accreditation, ATO maintenance, and NIST-based controls. The RMF Analyst will help prepare security packages, write documentation, and ensure compliance for DoD systems and applications.

Responsibilities include monitoring architecture and regulations, coordinating with ISSOs, maintaining eMASS records, and evaluating scans and STIGs.

Qualifications

• Five years of information security experience.
• Four years in CS/A&A analysis and IA controls.
• DoD TS clearance required.
• Bachelor's degree or equivalent work experience.
• Familiarity with NIST SP 800-37 and 800-53 rev 4/5.

Responsibilities

• Monitor and assess Information Security Management and Security Technical Architecture.
• Assess regulations and controls (FIPS, NIST, DISN CPG, Navy RPG, Testing Guidance).
• Maintain regular meetings with RDT&E CORE/LAB managers and ISSOs.
• Maintain records in the eMASS system.
• Evaluate ACAS scans, STIGs, and Security Tooling (FMATS or NAVSEA/DoD tools).
• Monitor security access, passwords, badges, and logins.
• Use firewalls and security standards to protect the organization.
• Perform security assessments, vulnerability testing, and risk analysis.
• Conduct internal and external security audits.
• Identify causes of security breaches.

Skills

Information security

Risk assessment

Regulatory compliance

IA controls analysis

Documentation

Education

Bachelor's degree or equivalent

DoD Top Secret Security Clearance

CISSP / CISM / CASP

Tools

eMASS

STIG review tools

FMATS

Visio

MS Project

Job description

Delaware Nation Industries is supporting the Naval Surface Warfare Center Dahlgren Division Dam Neck Activity (NSWCDD DNA). We will be providing enterprise management and technical support of the Naval Surface Warfare Center Dahlgren Division Dam Neck Activity (NSWC DD DNA) by providing assistance in policy, procedures, seat refresh, engineering/technical solutions, ordering to Next Generation Enterprise Network (NGEN) and the Naval Networking Environment (NNE) strategy.

Job Summary

The RMF Analyst will assist in developing RMF accreditation packages and assist in maintaining Authorization to Operate (ATO) certifications for networked systems and applications used by the organization. The RMF Analyst will assist in the development of information system documentation and the provision of a designated set of common controls for the authorization package, including the executive summary, system security plan, privacy plan, security control assessment, privacy control assessment, and any relevant plans of action and milestones. This system certification documentation must comply with DoD and Civilian Agency policy focused on NIST 800-37, NIST 800-53 rev 4.

Responsibilities

• Monitor and assess existing Information Security Management and Security Technical Architecture, regulations, and controls (FIPS, NIST, DISN Connection Process Guide(CPG), Navy RMF Process Guide (RPG), Navy Testing Guidance)
• Assess proposed Information Security Management and Security Technical Architecture, regulations, and controls (FIPS, NIST, DISN CPG, Navy RPG, Navy Testing Guidance)
• Maintain regular meetings/notes and informal dialog with RDT&E CORE/LAB managers and ISSOs to keep them abreast of upcoming Information System Security Manager (ISSM) requirements and to gather specifics on their capability and core support requirements and trends
• Maintain records in the Enterprise Mission Assurance Support Service (eMASS)
• Evaluating technical testing from Assured Compliance Assessment Solution (ACAS) scans, Evaluate STIG, eMASSter), and Security Technical Implementation Guide Viewer tool using FMATS or other NAVSEA or DoD-approved toolset.
• Monitor security access, passwords, badges, log-ins, to keep a site or system safe
• Use firewalls and information security standards to keep their organization secure
• Perform security assessments, vulnerability testing and risk analysis
• Conduct security audits internal and external
• Identify the cause of security breaches

Experience

• Five (5) years of relevant professional experience
• Minimum of four (4) years’ experience in CS / Assessment and Authorization (A&A) analysis support in information assurance (IA) controls analysis, conducting risk assessments, risk mitigation analysis, and developing contingency plans

Qualifications

• DoD Top Secret Security Clearance
• Cyber Security Workforce level IAM II/III CASP,CISM, or CISSP required
• 5+ Years of Experience in Cyber Security
• Bachelor’s degree or Equivalent Work Experience
• Familiarity with NIST IT Security Special Publication (SP) 800 Series with emphasis on NIST SP 800-37 and NIST SP 800-53 rev 4/5
• Forensics analysis familiarity
• Experienced STIG reviewer
• Microsoft Visio and Microsoft Project user