Senior RMF Cyber Security Analyst – Secret Clearance

Comunidade Metodista; Quantico (VA); On-site; USD 85,000 - 130,000; Full time

Job summary

Nationwide IT Services is seeking a Senior RMF Cyber Security Analyst to support DoD RMF programs in Quantico, VA, on-site. The role requires an Active Secret clearance and 5+ years of hands-on cybersecurity experience, including DoD A&A, DISA STIGs, and NIST SP 800-53.

You will ensure RMF controls, manage ATOs, and produce documentation such as SSPs and SA&A packages, contributing to ongoing risk assessments and continuous monitoring efforts.

Qualifications

• Active Secret clearance required.
• 5+ years of hands-on cybersecurity experience, including DoD A&A processes and compliance.
• Bachelor’s degree in IT, Cybersecurity, or related field, or equivalent experience.
• DoD 8570-M/8140-M IAT Level II certification preferred.

Responsibilities

• Collaborate with program managers and ISSMs on enclave and system cybersecurity issues.
• Track and report POA&Ms, RMF status, Annual Assessments, ATOs, and Continuous Monitoring.
• Ensure documentation supports ATOs, including SSPs and SA&A packages.
• Conduct security control assessments and risk evaluations for authorizations.
• Provide risk mitigation strategies and QA on assessments and documentation.
• Review and update cybersecurity documentation per DoD and DSS mandates.
• Assist with Mission Assurance, policy development, and cybersecurity research.

Skills

Cybersecurity experience

DoD RMF/a&A processes

Risk assessment & mitigation

Documentation & compliance

Education

Bachelor’s degree in IT or Cybersecurity

Tools

DISA STIGs

NIST SP 800-53

DoD eMASS

System Security Plans (SSP) & SA&A packages

Job description

Nationwide IT Services is seeking a Senior RMF Cyber Security Analyst to support DoD RMF programs in Quantico, VA, on-site. The role requires an Active Secret clearance and 5+ years of hands-on cybersecurity experience, including DoD A&A, DISA STIGs, and NIST SP 800-53.

You will ensure RMF controls, manage ATOs, and produce documentation such as SSPs and SA&A packages, contributing to ongoing risk assessments and continuous monitoring efforts.