RMF Cybersecurity Analyst — Clearance Required

Navarro Research and Engineering; West Milton (NY); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health Care Plan (Medical, Dental &amp

Retirement Plan (401k)

Life Insurance (Basic, Voluntary &

Paid Time Off (Vacation & Public

Short Term & Long-Term Disability

Job summary

Navarro Research and Engineering is seeking a Cybersecurity Analyst to support RMF processes for DoE/DoD environments in West Mifflin, PA or West Milton, NY. An active DOE clearance or DOD equivalent is required.

You will develop SSPs and SARs using RSA Archer on the NNPP Net, assist in POA&Ms and RBDs, and coordinate with information system owners to ensure certification and authorization. Candidates should have experience in security control validation/assessment, FedRAMP, and CISSP/CCSK

Qualifications

• At least four years of combined experience in security control validation, security control assessment, ISSO or ISSM.
• At least two years of experience supporting development of information system security authorization packages per RMF (NIST 800-37, 800-53, 800-53a).
• At least two years of experience working with FedRAMP.
• Security+ Certification.

Responsibilities

• Execute all aspects of the RMF to support information system authorization.
• Assist in development of SSPs and SARs using RSA Archer on NNPP Net.
• Develop Plans of Action and Milestones (POA&Ms) and Risk Based Decisions (RBDs) for deficiencies.
• Coordinate with information system owners to ensure compliance for DoE/DoD environments.

Skills

Security control validation

Security control assessment

ISSO/ISSM experience

NIST RMF 800-37/53

FedRAMP knowledge

RSA Archer

CISSP

CCSK

NIST 800-171

Tools

RSA Archer

Job description

Navarro Research and Engineering is seeking a Cybersecurity Analyst to support RMF processes for DoE/DoD environments in West Mifflin, PA or West Milton, NY. An active DOE clearance or DOD equivalent is required.

You will develop SSPs and SARs using RSA Archer on the NNPP Net, assist in POA&Ms and RBDs, and coordinate with information system owners to ensure certification and authorization. Candidates should have experience in security control validation/assessment, FedRAMP, and CISSP/CCSK