Systems Security Analyst

Magnus Management Group LLC; United States; On-site; USD 90,000 - 115,000; Full time

Benefits offered by this job

401(k)

Dental insurance

Health insurance

Paid time off

Vision insurance

Job summary

Magnus Management Group LLC is seeking a Systems Security Analyst to protect Facility-Related Control Systems by leading RMF processes, vulnerability management, and incident response. The role requires coordination with DoN stakeholders and hands-on security engineering expertise.

You will manage eMASS artifacts, track ATOs, and develop policies aligned with NIST SP 800-53 while maintaining continuous monitoring and reporting for program success.

Qualifications

• Minimum five years RMF experience, including FRCS cybersecurity engineering activities.
• Must hold Secret clearance.
• Experience using DoN tools for RMF artifacts and vulnerability management.
• Ability to coordinate with government stakeholders and compliance teams.

Responsibilities

• Drive end-to-end RMF lifecycle (Steps 1-6) per DoN/NAVFAC guidance and maintain eMASS packages.
• Achieve and track ATOs for FRCS; support security reviews and change memos.
• Develop security policies and SOPs mapped to NIST SP 800-53 controls.
• Execute vulnerability assessments using ACAS/SCAP and perform STIG validations.
• Prepare Security Center and eMASSter reports and upload results to VRAM.
• Sustain continuous monitoring through scans, logs, remediation tracking, and POA&M updates.
• Coordinate RMF Step 4 validation on-site with system owners and validators.
• Serve as Configuration Management Officer on the CCB for FRCS baseline changes.
• Support cyber incident response as part of the MAR Cyber Incident Response Team.

Skills

RMF

Security engineering

Policy development

Incident response

Education

CCSP

Security+

CISSP-ISSEP

CISSP

Tools

ACAS

SCAP

STIG

eMASS

VRAM

Job description

Benefits

• 401(k)
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance
• Work Location: Building 3190, Naval Base Guam (NBG), Santa Rita, Guam 96915

Position Overview

We are seeking a Systems Security Analyst to support our client. You will help protect the confidentiality, integrity, and availability of Facility-Related Control Systems by leading security engineering, Risk Management Framework (RMF), vulnerability management, continuous monitoring, and incident response activities. This is a mission-essential, hands‑on role for a security professional who can work independently, coordinate across technical and government stakeholders, and turn complex compliance requirements into operational results.

Key Responsibilities

• Drive the end‑to‑end RMF lifecycle (Steps 1‑6) in accordance with current Department of the Navy and NAVFAC Echelon II guidance; verify artifacts for completeness, quality, and compliance and maintain accurate eMASS packages.
• Achieve, maintain, and track Authorities to Operate (ATOs) for FRCS; support annual security reviews and prepare Memorandums for Record for approved baseline changes.
• Develop and maintain security policies, standard operating procedures, and implementation plans mapped to applicable NIST SP 800‑53 control families and tailored to the FRCS environment.
• Execute vulnerability and compliance assessments using approved DoN tools such as ACAS, SCAP, and Evaluate STIG; complete manual STIG/SRG validations and maintain .ckl/.cklb checklists.
• Prepare Security Center and eMASSter reports for eMASS integration and ensure vulnerability results are accurately uploaded and maintained in VRAM.
• Sustain system‑level continuous monitoring through recurring scans, audit‑log analysis, remediation tracking, mitigation, and quarterly POA&M updates.
• Coordinate and support on‑site RMF Step 4 validation, including evidence collection and collaboration with system owners and independent validators.
• Serve as a technical representative and/or Configuration Management Officer on the Configuration Control Board, providing security‑impact analyses and risk assessments for proposed FRCS baseline changes.
• Support cyber incident response as a member of the MAR Cyber Emergency Response Team, including participation in an on‑call rotation and preparation of operational logs and after‑action reports.
• Provide bi‑weekly RMF status reports to the ISSM, maintain project records in Maximo and/or eProjects, and contribute to monthly status reporting.

Required Qualifications

• Must be a US Citizen
• Must hold Secret Clearance
• Minimum of five years of RMF experience, including at least one year of specialized experience supporting FRCS RMF and cybersecurity engineering activities
• At least one current qualifying certification: CCSP, Cloud+, GICSP, GISF, GSEC, or Security+, RCCE Level 1, CISSO, CISSP-ISSEP, CySA+, FITSP‑O, GCLD, GCSA, GSNA.