Security Analyst

Agile Defense; Ridgecrest (CA); On-site; USD 95,000 - 130,000; Full time

Job summary

Agile Defense in China Lake, CA is seeking a Security Analyst to support RMF processes and DoD-based authorization activities at the China Lake site. You will review RMF artifacts, perform control assessments, and coordinate with the Security Control Assessor to ensure timely authorization decisions.

The role requires RMF knowledge, strong written and verbal communication, and the ability to work independently in a fast-paced environment, with Navy-related systems experience preferred.

Qualifications

• Applicant should possess a strong understanding of the RMF process and related tools.
• Excellent written and verbal communication skills, with ability to report findings to diverse stakeholders.
• Ability to work independently and manage multiple tasks in a fast-paced environment.
• Prior experience supporting Navy-specific systems or enterprise networks.
• B.S. in Technical Field with 4 years of experience or 6 years in planning, implementation, upgrading and/or monitoring of security measures.

Responsibilities

• Execute and oversee RMF Documentation and Compliance: Review accuracy and traceability of A&A documentation within eMASS to support system authorization.
• Review documentation to ensure full compliance with cybersecurity policies and standards (DoD, DoW, DoN, RMF).
• Conduct security control assessments and validations of a system's security features to mitigate threats and vulnerabilities.
• Ensure completion of all RMF products and reporting in coordination with Security Control Assessor.
• Assist in updating risk assessment documentation based on assessment results.
• Conduct vulnerability analysis to facilitate mitigation and residual risk determination.
• Support the continuous monitoring program as needed to meet authorization requirements.
• Assist in contingency planning, testing, and execution.
• Support incident response and provide updates to program team.

Skills

RMF process understanding

Analytical thinking

Communication skills

Independent work

Education

B.S. in a technical field

Tools

eMASS

eMASSter

STIG Viewer

SCAP Compliance Checker

VRAM

Visio

Job description

Requisition #: 1567

Job Title: Security Analyst

Location: China Lake, CA

Clearance Level: Must Have Ability to Obtain a Secret Security Clearance

Required Certification(s): IAM Level II Certificate or higher (Sec+ and CAP, CASP+, CCISO, CISM, CISSP)

Responsibilities

• Execute and oversee RMF Documentation and Compliance: Review the accuracy and traceability of all A&A documentation within eMASS to support timely system authorization.
• Review documentation to ensure full compliance with cybersecurity policies and standards (DoD, DoW, DoN, and RMF).
• Conduct security control assessments and validations of a system's technical and non-technical security features to mitigate known threats and vulnerabilities effectively. These assessments should comprehensively identify and assess impacts while also taking into account existing risk mitigation strategies.
• Ensure the completion of all necessary RMF products and reporting in accordance with policy and in collaboration with the Security Control Assessor.
• Assist in updating any documentation related to risk assessments (such as Risk Assessment Reports, Plan of Actions & Milestones, etc.) based on the results of assessments.
• Conduct the necessary vulnerability analysis to facilitate the mitigation and determination of residual risk as required.
• Provide support for the continuous monitoring program as needed, especially when System Level Continuous Monitoring results are essential to meet ongoing authorization requirements.
• Assist in contingency planning, testing, and execution as necessary.
• Support the incident response process and actively participate in meetings with the program team, offering updates on project status.

Qualifications

• Applicant should possess a strong understanding of the RMF process, as well as a working knowledge of eMASS, eMASSter, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio applications.
• Excellent written and verbal communication skills, with an ability to clearly report on technical findings to both technical and non-technical stakeholders.
• Ability to work independently and manage multiple tasks in a fast-paced environment.
• Prior experience supporting Navy-specific systems or enterprise networks.
• B.S. in Technical Field with either 4 years of experience or 6 years in the planning, implementation, upgrading, and/or monitoring of security measures for corporate or government networks.

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities