RMF Security Analyst for FRCS & Cyber Ops

Magnus Management Group LLC; United States; On-site; USD 90,000 - 115,000; Full time

Benefits offered by this job

401(k)

Dental insurance

Health insurance

Paid time off

Vision insurance

Job summary

Magnus Management Group LLC is seeking a Systems Security Analyst to protect Facility-Related Control Systems by leading RMF processes, vulnerability management, and incident response. The role requires coordination with DoN stakeholders and hands-on security engineering expertise.

You will manage eMASS artifacts, track ATOs, and develop policies aligned with NIST SP 800-53 while maintaining continuous monitoring and reporting for program success.

Qualifications

• Minimum five years RMF experience, including FRCS cybersecurity engineering activities.
• Must hold Secret clearance.
• Experience using DoN tools for RMF artifacts and vulnerability management.
• Ability to coordinate with government stakeholders and compliance teams.

Responsibilities

• Drive end-to-end RMF lifecycle (Steps 1-6) per DoN/NAVFAC guidance and maintain eMASS packages.
• Achieve and track ATOs for FRCS; support security reviews and change memos.
• Develop security policies and SOPs mapped to NIST SP 800-53 controls.
• Execute vulnerability assessments using ACAS/SCAP and perform STIG validations.
• Prepare Security Center and eMASSter reports and upload results to VRAM.
• Sustain continuous monitoring through scans, logs, remediation tracking, and POA&M updates.
• Coordinate RMF Step 4 validation on-site with system owners and validators.
• Serve as Configuration Management Officer on the CCB for FRCS baseline changes.
• Support cyber incident response as part of the MAR Cyber Incident Response Team.

Skills

RMF

Security engineering

Policy development

Incident response

Education

CCSP

Security+

CISSP-ISSEP

CISSP

Tools

ACAS

SCAP

STIG

eMASS

VRAM

Job description

Magnus Management Group LLC is seeking a Systems Security Analyst to protect Facility-Related Control Systems by leading RMF processes, vulnerability management, and incident response. The role requires coordination with DoN stakeholders and hands-on security engineering expertise.

You will manage eMASS artifacts, track ATOs, and develop policies aligned with NIST SP 800-53 while maintaining continuous monitoring and reporting for program success.