RMF Analyst II

About the role

Epsilon, Inc. has joined AMERICAN SYSTEMS! As one organization, we offer expanded resources, streamlined operations, and increased opportunities for growth and development. Join us to be part of a dynamic, collaborative environment dedicated to innovation and customer success.

Responsibilities

As the RMF Analyst II, you will directly liaison with the government customer to manage the review, audit, and authorization of Risk Management Framework (RMF) assessment and authorization (A&A)/ATO Packages for IT systems of varying size and complexity. In this role, you will:

• Perform hands-on artifact review along with package management and review.
• Directly support the customer in the oversight of multiple system boundaries.
• Make recommendations regarding the selection of cost-effective security controls to mitigate risk (e.g., protection of information, systems, and processes).
• Ensure consistent application of cybersecurity standards across multiple information systems.
• Ensure all new cybersecurity projects meet or integrate cybersecurity standards into their development.
• Author detailed security assessment reports and plans of action and milestones (POA&Ms), Risk Assessment Reports (RARs), and other artifacts associated with the RMF process.
• Conduct in-depth analysis of complex systems and their interconnections through RMF.
• Participate in high-level discussions about organizational risk management strategies.
• Recommend improvements to RMF processes and tools to enhance efficiency and effectiveness.
• Review and approve system security plans and other RMF documentation.

Requirements

• U.S. Citizenship (required).
• Ability to attain and retain DoE L or DoD Secret clearance.
• Five (5) or more years of experience in the Cybersecurity field or a combination of related education and experience.
• Active Certified Information Systems Security Professional (CISSP) certification from ISC2.
• Experience with assessment and authorization (A&A).
• Experience with assessing and validating RMF, NIST, and other security controls.
• RMF experience in package generation and assessment.
• Visio diagram creation and modification.
• RMF documentation creation and modification (SSP, CCB, COOP, etc.).
• Familiarity with NIST 800-53 controls and applicable overlays.
• Ability to provide security assessment reports that cover risks the client should be aware of and mitigate, with residual risks remaining.
• Must be within a 2-hour commute of the customer location and will be required to travel onsite based on customer request.

Desired Qualifications

• Security+ Ce, CySA+, SSCP, GSEC, GICSP, CND, CCNA Security, or equivalent certifications.

Pay

The salary range for this position is USD $70,000.00/Yr. - USD $100,000/Yr. Actual compensation will be determined based on several factors permitted by law.

Benefits

AMERICAN SYSTEMS provides a comprehensive benefits program for the welfare of its employees and their dependents, including:

• Healthcare benefits
• Paid leave
• Retirement plans
• Insurance programs
• Education and training assistance