Systems Security Analyst [Various Levels] Contingent

Lufco; Belleville (IL); On-site; USD 90,000 - 140,000; Full time

Job summary

Lufco, based in Illinois, seeks a Systems Security Analyst to support RMF administration and governance across customer environments.

Qualified candidates will hold a cyber-related degree, have 4+ years in RMF/IA, and be proficient with eMASS, ACAS, and vulnerability management while adhering to DoD 8140.03 standards and CUI policies.

Qualifications

• Degree in cybersecurity, computer science, information technology, or related field.
• Minimum 4 years of hands‑on RMF/IA experience.
• Experience administering RMF artifacts and eMASS workflows.

Responsibilities

• Develops, updates, and maintains RMF artifact packages in eMASS to achieve Authorizations to Operate across systems.
• Conducts automated and manual vulnerability assessments using ACAS/Tenable and delivers compliance reports.
• Generates and tracks POA&Ms and Vulnerability Index reports with weekly quarantine updates.
• Ensures compliance with DD Form 254, AR 380-5, and CUI policies.

Skills

RMF administration

IA assessments

eMASS workflows

ACAS / Tenable

Vulnerability management

DoD 8140.03

CUI policies

Education

Associate’s or Bachelor’s Degree in Cybersecurity/CS/IT

Tools

ACAS

Tenable Security Center

eMASS

Job description

Systems Security Analyst

Position Overview

This Position Description establishes the technical requirements, core duties, governance parameters, and qualification standards for the Systems Security Analyst supporting the customer.

• Capability Area: Cybersecurity Operations - RMF & Compliance
• DCWF Work Role Code: 651 - Systems Security Analyst
• Minimum Proficiency Level: Intermediate
• Key Personnel Designation: No
• Service Classification: Phase I Pre-Convergence Service

Core Responsibilities

• Risk Management Framework (RMF) Administration: Develops, updates, and maintains complete RMF artifact packages ( within the Enterprise Mission Assurance Support Service (eMASS) to achieve and sustain Authorizations to Operate (ATOs) across all in-scope systems, applications, and network enclaves.
• Vulnerability Scanning & Technical Compliance: Conducts automated and manual vulnerability assessments using Assured Compliance Assessment Solution (ACAS / Tenable Security Center) and delivers monthly STIG/SCAP Compliance Reports.
• Remediation & Quarantine Management: Formulates weekly Vulnerability Index (VI) reports alongside Plans of Action & Milestones (POA&Ms) via CDRL A020, and tracks non-compliant devices subject to network isolation via Weekly Quarantine Reports.
• Security Program & Governance Enforcement: Maintains eMASS system documentation and ensures strict operational alignment with DD Form 254 guidelines, AR 380-5, and DoDI 5200.48 Controlled Unclassified Information (CUI) policies.

Minimum Qualifications & Certification Standards

Education & Experience Requirements

• Degree: Associate’s or Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, or a related technical field.
• Experience: Minimum of 4 years of hands‑on experience developing RMF documentation, executing IA assessments, managing eMASS workflows, and operating ACAS vulnerability scanning suites.

DoDM 8140.03 Workforce Qualification Standards

All contractor personnel performing cyberspace functions under this contract must comply with DoDM 8140.03 standards for DCWF Work Role 651 prior to commencing billable work:

• Foundational & Residential Qualification: Must hold active residential qualification credentials and foundational DCWF certifications appropriate for the Intermediate proficiency level.
• Qualifying Certifications:
  • Security+ CE, SSCP, CCNA Security.
  • CySA+, CCNP Security, CISA, CGRC.
  • CISSP, CISM, SecurityX.

Security Clearance & Vetting

• Clearance Level: Active Secret clearance required prior to contract start; Top Secret/SCI eligible.
• System Vetting: Must complete full vetting through DISS and MP ICAM prior to issuance of Common Access Card (CAC) and elevated system access privileges.

Position & Compensation Disclaimer (Pay Transparency Mandates):

Employment for this role is conditional upon contract award, executed funding, and client approval. Advertised ranges do not constitute a binding promise of specific salary. In compliance with applicable federal, state, and municipal pay transparency requirements—including but not limited to pay disclosure rules in California, Colorado, New York, and Washington—posted salary bands remain flexible. Compensation ranges may be modified prior to an offer to reflect candidate expertise, client budget constraints, and localized geographic pay scales tied to the assigned work site or state of residence.