Systems Security Analyst

Magnus Management Group LLC; Guam; On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

401(k)

Dental insurance

Health insurance

Paid time off

Vision insurance

Job summary

Magnus Management Group LLC is seeking a Systems Security Analyst to support a DoN/NAVFAC FRCS environment. The role focuses on RMF leadership across risk management, vulnerability handling, and continuous monitoring to ensure secure operations.

You will coordinate with government stakeholders, develop security policies, and manage artifacts in eMASS and related systems, delivering timely security assessments and documentation.

Qualifications

• Five years RMF experience with FRCS or cybersecurity engineering.
• Current qualifying certification: CCSP, Cloud+, GICSP, GISF, GSEC, Security+ or CISSP-related.
• US citizenship and Secret clearance required.
• Ability to coordinate with DoN, NAVFAC, and system owners.

Responsibilities

• Drive the end-to-end RMF lifecycle (Steps 1-6) per Navy guidance and maintain eMASS artifacts.
• Achieve and track Authorities to Operate (ATOs) for FRCS and support reviews.
• Develop security policies, SOPs, and implementation plans mapped to NIST 800-53.
• Execute vulnerability and compliance assessments using ACAS/SCAP and STIGs.
• Prepare Security Center and eMASSter reports for eMASS integration and VRAM uploads.
• Coordinate on-site RMF Step 4 validation with system owners and validators.
• Serve on the Configuration Control Board and provide risk analyses for FRCS changes.
• Support cyber incident response as part of MAR Cyber team and on-call rotation.
• Provide RMF status reports to ISSM and maintain project records in Maximo/eProjects.

Skills

US Citizenship

Secret Clearance

RMF Experience

Cybersecurity Engineering

Education

Security certifications (CCSP, Cloud+, GICSP, GISF, GSEC, Security+)

Tools

ACAS

SCAP

STIG

eMASS

Maximo

eProjects

Job description

Benefits

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

Work Location

Building 3190, Naval Base Guam (NBG), Santa Rita, Guam 96915

Position Overview

We are seeking a Systems Security Analyst to support our client. You will help protect the confidentiality, integrity, and availability of Facility-Related Control Systems by leading security engineering, Risk Management Framework (RMF), vulnerability management, continuous monitoring, and incident response activities. This is a mission-essential, hands-on role for a security professional who can work independently, coordinate across technical and government stakeholders, and turn complex compliance requirements into operational results.

Key Responsibilities

• Drive the end-to-end RMF lifecycle (Steps 1-6) in accordance with current Department of the Navy and NAVFAC Echelon II guidance; verify artifacts for completeness, quality, and compliance and maintain accurate eMASS packages.
• Achieve, maintain, and track Authorities to Operate (ATOs) for FRCS; support annual security reviews and prepare Memorandums for Record for approved baseline changes.
• Develop and maintain security policies, standard operating procedures, and implementation plans mapped to applicable NIST SP 800-53 control families and tailored to the FRCS environment.
• Execute vulnerability and compliance assessments using approved DoN tools such as ACAS, SCAP, and Evaluate STIG; complete manual STIG/SRG validations and maintain .ckl/.cklb checklists.
• Prepare Security Center and eMASSter reports for eMASS integration and ensure vulnerability results are accurately uploaded and maintained in VRAM.
• Sustain system-level continuous monitoring through recurring scans, audit-log analysis, remediation tracking, mitigation, and quarterly POA&M updates.
• Coordinate and support on-site RMF Step 4 validation, including evidence collection and collaboration with system owners and independent validators.
• Serve as a technical representative and/or Configuration Management Officer on the Configuration Control Board, providing security-impact analyses and risk assessments for proposed FRCS baseline changes.
• Support cyber incident response as a member of the MAR Cyber Emergency Response Team, including participation in an on-call rotation and preparation of operational logs and after-action reports.
• Provide bi-weekly RMF status reports to the ISSM, maintain project records in Maximo and/or eProjects, and contribute to monthly status reporting.

Required Qualifications

• Must be a US Citizen
• Must hold Secret Clearance
• Minimum of five years of RMF experience, including at least one year of specialized experience supporting FRCS RMF and cybersecurity engineering activities
• At least one current qualifying certification: CCSP, Cloud+, GICSP, GISF, GSEC, Security+, RCCE Level 1, CISSO, CISSP-ISSEP, CySA+, FITSP-O, GCLD, GCSA, GSNA.