Cyber Security Analyst II RMF

About the role

As an RMF/Cybersecurity Analyst, you will support Navy cybersecurity compliance and continuous monitoring activities by:

• Supporting RMF package maintenance in accordance with Navy BUPERS guidance
• Managing and maintaining system records within eMASS
• Coordinating with Navy Cyber RMF stakeholders on project timelines, deliverables, and compliance activities
• Maintaining RMF documentation, including hardware/software inventories, system diagrams, Contingency Plans, Disaster Recovery Plans, Incident Response Plans, Vulnerability & Patch Management Plans, Privacy Impact Assessments (PIA), and System-Level Continuous Monitoring (SLCM) strategies
• Ensuring monthly vulnerability scans, credentialed scans, and quarterly STIG updates are completed
• Processing scan results using eMASSter and documenting security findings
• Reviewing vulnerabilities, mapping findings to applicable security controls, and maintaining POA&M items
• Supporting Authorization to Operate (ATO) package updates and risk assessments

Required Qualifications

• Active Secret Security Clearance
• High School Diploma or equivalent
• 3+ years of experience supporting NIST RMF, DoD RMF, or DIACAP environments
• Navy Cyber Security Workforce (CSWF) IAM Level I certification or higher (Security+ CE, CAP, CND, GSLC, Cloud+, HCISPP, or equivalent)
• Experience supporting Security Assessment & Authorization (A&A)/ATO processes
• Hands-on experience with:
  • eMASS
  • ACAS vulnerability reports
  • SCAP compliance
  • Security Technical Implementation Guides (STIGs)
  • DoD Architecture Framework (DoDAF)
  • Cybersecurity risk assessments and vulnerability remediation
  • Proficiency with Microsoft Office (Word, Excel, PowerPoint, Visio)

Preferred Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, Business, or a related field
• Experience supporting Navy or DoD cybersecurity programs
• Prior DIACAP experience
• IT project management experience
• Strong technical writing, communication, and documentation skills
• Excellent analytical, problem-solving, and teamwork abilities
• Experience creating technical diagrams using Microsoft Visio

Physical Requirements

• Ability to work at a computer for extended periods
• Communicate effectively in both written and verbal formats
• Ability to access IT equipment in office and data center environments
• Occasionally lift equipment up to 25 pounds
• Reasonable accommodations will be provided in accordance with the Americans with Disabilities Act (ADA)