Senior Cybersecurity Analyst

Astrion; Washington (District of Columbia); On-site; USD 117,000 - 143,000; Full time

Job summary

Astrion is seeking a Senior Cybersecurity Analyst for an on-site role at the Washington Navy Yard in Washington, DC. The position requires top-level RMF expertise to lead systems through the full RMF lifecycle to achieve and renew Authorization to Operate (ATO).

The ideal candidate will have DoD/NIST policy knowledge, strong leadership, and a track record of presenting findings to Government and Military leadership. Secret clearance and DoD 8140 IAT Level II may be required.

Qualifications

• Master’s or higher in a relevant field with years of cyber security experience or
• Proven RMF lifecycle leadership and ability to obtain/renew ATO.

Responsibilities

• Provide cybersecurity expertise to surface combat system program offices.
• Lead RMF lifecycle activities to achieve/renew Authority to Operate (ATO).
• Review RMF package submissions for NAVSEA SOP alignment.
• Develop and review A&A documentation per RMF and DoD/A&A processes.
• Review system scans/tests via SCC and ACAS.
• Collaborate with NAVSEA/PEO IWS and program offices to ensure compliance.
• Assist in RMF package development as an ISSE.

Skills

RMF knowledge

Leadership

Communication

Time management

Flexibility

Education

Master's degree in a relevant field

Bachelor's degree in a relevant field

High school/GED + 20+ years experience

Tools

eMASS

eMASSter

SCC/ACAS

Job description

Overview

Senior Cybersecurity Analyst

Astrion has an exciting opportunity for a Senior Cybersecurity Analyst located at the Washington Navy Yard in Washington, DC. Work for this position is onsite at Washington Navy Yard a minimum of 4 days per week.

LOCATION: Washington DC – Navy Yard

JOB STATUS: Full-time

CLEARANCE: Secret

CERTIFICATION: DoD 8140 IAT Level II

TRAVEL: As Needed

SALARY RANGE: Estimated $130,000+ USD Annually*

*depending on experience, certifications, and qualifications

REQUIRED QUALIFICATIONS / SKILLS

• A master’s degree in a relevant field and ten (10) years of relevant experience in cyber security, information system management, software development, design or authorization; or
• A Bachelor’s degree in a relevant field and fifteen (15) years of relevant experience in cyber security, information system management, software development, design or authorization; or
• A high school degree, or a GED, and more than twenty (20) years of relevant experience in cyber security, information system management, software development, design or authorization.
• In depth knowledge of all steps in the RMF Process.
• Ideal candidate has Risk Management Framework (RMF) package development knowledge and can lead efforts to bring platform technology systems through the full lifecycle of the RMF process to achieve/renew an Authorization to Operate (ATO).
• Knowledge of DoD and DON cyber policies and procedures and/or NIST 800-53, DoDI 8500.01, and DoDI 8510.01.
• Must be flexible in adapting to deadlines, changing schedules, competing priorities, and unpredictable events.
• Ideal candidate has demonstrated ability to assign work and manage personnel and tasks.
• Familiar with and able to present data and recommendations to Government and Military leadership.
• Thorough, detail oriented, and organized, with excellent time management skills and ability to prioritize and handle multiple projects at once.
• Superb verbal and written communication skills.
• Self-motivated and independent thinker with out-of-the-box ideas.
• Leadership skills.

PREFERRED QUALIFICATIONS / SKILLS

• Familiarity with PEO IWS organization and systems.
• Familiarity with the NAVSEA FAO RMF Process.
• Working knowledge of DoD, DON, NAVSEA, and PEO cyber regulations.
• Proficient in eMASS and eMASSter tool.

RESPONSIBILITIES

• Provide cybersecurity expertise to surface combat system program offices.
• Lead efforts to bring Platform Information Technology systems and other systems through the full life cycle of the Risk Management Framework (RMF) process to achieve/renew Authority to Operate (ATO).
• Review RMF package submission to ensure alignment with the NAVSEA Standard Operating Procedures (SOP).
• Develops, coordinates, and reviews detailed Assessment & Authorization documentation in accordance with DoD Instruction 8510.01 – DoD Information Assurance Assessment and Authorization (A&A) Process (RMF).
• Review systems scans/tests using the Security Content Automation Protocol (SCAP) Compliance Checker (SCC), and the Assured Content Assessment Solution (ACAS).
• Work with the NAVSEA, PEO IWS, combat system program offices to ensure DOD/DON cybersecurity regulations and best practices are followed in the design, development, and sustainment of the integrated combat systems and weapon systems.
• Assist in RMF package development activities as an ISSE.