RMF Cybersecurity Lead for Mission-Critical Systems

ASRC Federal; Colorado Springs (CO); Hybrid; USD 120,000 - 160,000; Full time

Benefits offered by this job

Health care

Dental

Vision

Life insurance

401(k)

Education assistance

Paid time off

Holidays

Paid leave

Job summary

ASRC Federal is seeking a Principal Cybersecurity Analyst to support an ISSO role for the GMASS program in Colorado Springs, CO. The candidate will document RMF package deliverables, prepare CSAs and POA&Ms, and maintain RMF artifacts in eMASS with stakeholders across teams.

The role requires active clearance and CISSP CE or equivalent, with extensive RMF and DoD/NIST framework knowledge. Competitive compensation and benefits offered by ASRC Federal.

Qualifications

• Active Secret clearance required.
• Bachelor's degree with 9+ years of experience (or Master's with 7+ years, PhD/JD with 4+ years).
• Expert understanding of RMF Security Authorization Packages and cybersecurity for DoD/DoDI frameworks.

Responsibilities

• Document RMF Package Deliverables per DI-MGMT-82001A for RMF Authorization Packages.
• Prepare and maintain System Categorization Memoranda per CNSSI 1253 for GMASS systems ATO packages.
• Identify, assess, track, and report risks and vulnerabilities for GMASS systems.
• Prepare and maintain POA&M for each ATO package.
• Collaborate to document and maintain RMF packages in eMASS with artifacts and controls.

Skills

RMF Security Authorization

Risk assessment

Cybersecurity principles

Enterprise networks

Education

Bachelor's degree

Master's degree

PhD/JD

Tools

eMASS

RMF

NIST SP 800-30

NIST SP 800-37

Job description

Description:

ASRC Federal System Solutions, LLC. (AFSS), a subsidiary of ASRC Federal, is a premier provider of systems engineering, software engineering, system integration and project management services for real-time, mission-critical defense systems. AFSS is seeking a Principal Cybersecurity Analyst to support an Information System Security Officer (ISSO) role in Colorado Springs, CO to support the Ground Based Radar Maintenance and Sustainment Service (GMASS) program.

Key Role:

• Documents required RMF Package Deliverables as identified in DI-MGMT-82001A to be included for RMF Security Authorization Packages.
• Prepares and maintains a System Categorization Memorandum IAW CNSSI 1253 for each GMASS-covered systems ATO Security Authorization Package.
• Identifies, assesses, tracks, and reports risks and vulnerabilities for GMASS-covered systems IAW /USSF and DoD cybersecurity assurance requirements.
• Prepares and maintains a Plan of Action and Milestones (POA&M) for each ATO package.
• Collaborates with stakeholders to document, update, and maintain GMASS-covered systems RMF Security Authorization Packages in the Enterprise Mission Assurance Support Service (eMASS); including applicable artifacts, documentation, and controls as prescribed, and provide control verification and validation services to assure the same.

Required Qualifications:

• Expert knowledge and experience in the development and processing of RMF Security Authorization Packages.
• Typical education and experience: Bachelors and nine (9) years or more experience; Masters and seven (7) years or more experience; PhD or JD and four (4) years or more experience.
• Active Secret clearance required.
• Current CISSP CE or equivalent.
• Expert understanding of cybersecurity principles, of enterprise-level networks, and software development.

Preferred Qualifications:

• Expert knowledge of DoDI 8500.01, DoDI 8510.01, AFI 17-101, AFI 17-130, NIST SP 800-30, and NIST SP 800-37.
• Experience and working knowledge of the GMASS-covered systems.