RMF Security Analyst

About the role

This is a hybrid position based primarily on-site, with opportunity for 1-2 remote days per week depending on mission needs. The position supports the implementation and administration of information security policies, procedures, and technologies to ensure the protection of systems, applications, and data on tactical and development networks.

Responsibilities

• Support the Assessment and Authorization of DoD systems, software, and networks in accordance with the Risk Management Framework (RMF), utilizing the Enterprise Mission Assurance Support Service (eMASS) system.
• Provide professional security services for IA/Cybersecurity in accordance with US Government (USG), Department of Defense (DoD) and National Security Agency (NSA) policies and guidelines.
• Provide the necessary support to monitor and ensure compliance with information security policies, procedures and regulatory requirements including assistance with internal auditing, reporting, technical reviews, and identification of security risks.
• Aid in drafting, reviewing, editing, and recommending guidance for Standard Operating Procedures (SOP), Tactics, Techniques, & Procedures (TTP), System Security Plans (SSP), Plan Of Action and Milestones (POA&M), and Federal Information Security Management Act (FISMA).
• Support the implementation and administration of information security policies, procedures, and technologies to ensure the protection of systems, applications, and data on tactical and development networks by working hand and hand with technical SMEs, systems administrators and engineers.

Qualifications

• Active DoD Secret clearance.
• Bachelor's Degree in a related discipline as well as professional, directly relevant experience depending on job level (Level II: 2+ years of experience, Level III: 4+ years of experience).
• Must possess DoD 8140 (formerly 8570) IAT Level II certification (e.g., Security+) prior to start date.

Preferred Qualifications

• Experience with Cross Domain Solutions and Secret and Below Interoperability (SABI) framework, process and implementation.
• Experience in performing risk assessment, IT audits, security planning, systems accreditation and policy development.
• Experience complying with USG, DoD, and DA regulations and preparing for responding to information security audits and questionnaires.
• Understanding of related information technology (e.g. firewalls, VPN, virtualization, DLP, etc) and physical security assets.
• Knowledge of domain structures, user authentication, data encryption, access audits and end-user security best practices.
• Experience with UNIX/LINUX OS and any scripting language.
• Experience working with IDS/IPS and processes.

Pay and Benefits

The pay range for this job level is $69,550.00 - $125,725.00. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement.