Senior RMF Cybersecurity Analyst A&A & ISCM Expert

Amentum; North Carolina; On-site; USD 97,000 - 106,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off and holidays

401(k) matching

Educational reimbursement

Parental leave

Employee stock purchase plan

Tax-saving options

Disability and life insurance

Pet insurance

Job summary

Amentum seeks a Cybersecurity Systems Analyst to support RMF implementation for USSOCOM and subordinate commands. The role requires deep RMF knowledge, defense- in-depth risk assessments, and collaboration with DoD/IC stakeholders across DISN, cloud, and IT environments.

The successful candidate will coordinate A&A activities, perform vulnerability assessments with ACAS/Nessus, and maintain documentation in SIE and government systems, ensuring timely accreditation actions.

Qualifications

• Eight or more years of cybersecurity/RMF experience.
• Bachelor’s degree (BA/BS) required.
• Current DoD 8570.01 IAT-Level III or IAM Level III certification.

Responsibilities

• Performs RMF coordination and advises customers on RMF; develops POAs for resolving deficiencies per DODI 8510.01 and ICD 503.
• Assesses network controls per NIST 800-53 and creates A&A packages; validates IT systems for the Cybersecurity program.
• Executes comprehensive assessment, compliance, and validation of customer networks to ensure regulatory compliance and security.
• Advise USSOCOM and components on network/system risks and mitigation actions.
• Perform security evaluations using ACAS, Nessus, and SCAP tools; identify STIGs and coordinate remediation.

Skills

US Combatant Commands experience

System administration background

Networking and identity management

Microsoft and Linux OS

Education

BA/BS

Tools

Xacta

eMASS

ACAS

Job description

Amentum seeks a Cybersecurity Systems Analyst to support RMF implementation for USSOCOM and subordinate commands. The role requires deep RMF knowledge, defense- in-depth risk assessments, and collaboration with DoD/IC stakeholders across DISN, cloud, and IT environments.

The successful candidate will coordinate A&A activities, perform vulnerability assessments with ACAS/Nessus, and maintain documentation in SIE and government systems, ensuring timely accreditation actions.