Security Operations & RMF Analyst

Oasys International, LLC; Elizabeth City (NC); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Oasys International LLC is seeking an Information Security Analyst - Journeyman to support cybersecurity, RMF activities, and security operations for mission-critical systems. The role involves assessing risk, validating controls, monitoring posture, and remediation across system lifecycles.

Collaboration with government stakeholders is essential. Responsibilities include RMF activities, vulnerability assessments, SIEM-driven monitoring, and developing security documentation.

Qualifications

• Bachelor's or Associate degree in Computer Science, Math, Information Technology, Engineering, or related field; two years of experience may substitute for one year of education.
• Minimum of two years of information security experience (analyst or security operations).
• Two years of experience with SIEM.
• Two years of RMF support experience.
• Basic knowledge of Active Directory, UNIX, Windows, and relational databases.

Responsibilities

• Plan, implement, upgrade, monitor, and support security measures for networks, systems, and applications.
• Evaluate RMF activities and ensure systems meet cybersecurity requirements.
• Perform RMF activities for government cloud environments and risk analyses.
• Identify and remediate cybersecurity vulnerabilities throughout the SDLC.
• Support Security Controls Auditor with validation and RMF tasks.
• Develop and maintain POA&Ms and remediation plans.
• Use SIEM to monitor and analyze security events and incidents.
• Prepare cybersecurity documentation and reports as required.

Skills

RMF activities

SIEM technologies

Vulnerability analysis

Active Directory

Windows

Unix

Communication skills

Education

Bachelor's or Associate degree in CS/Math/IT/Engineering

IT certification

Tools

Splunk

Job description

Oasys International LLC is seeking an Information Security Analyst - Journeyman to support cybersecurity, RMF activities, and security operations for mission-critical systems. The role involves assessing risk, validating controls, monitoring posture, and remediation across system lifecycles.

Collaboration with government stakeholders is essential. Responsibilities include RMF activities, vulnerability assessments, SIEM-driven monitoring, and developing security documentation.