RMF Cybersecurity Analyst

CA CI is seeking an RMF Cybersecurity Analyst to implement and maintain Risk Management Framework (RMF) processes for multiple U.S. Navy gun weapon systems. This onsite role supports the Naval Surface Warfare Center detachment at Picatinny Arsenal, NJ and focuses on managing authorization activities, compliance, vulnerability assessment support, continuous monitoring, and security documentation in eMASS.

What you will do

• Manage the security authorization lifecycle for one or more information systems in accordance with Federal Risk Management Framework (RMF) requirements.
• Coordinate activities to obtain and maintain program office Authorization to Operate (ATO) approvals.
• Assess and track implementation of NIST SP 800-53 security controls and associated compliance requirements.
• Input and maintain documentation in Enterprise Mission Assurance Support Service (eMASS).
• Manage POA&M activities by tracking findings, monitoring remediation progress, validating corrective actions, and supporting closure efforts.
• Provide technical guidance and compliance recommendations to system owners, engineers, administrators, and security stakeholders to support POA&M remediation and closure.
• Coordinate with technical teams to gather evidence supporting security control implementation and compliance requirements.
• Review vulnerability scan results, assessment findings, and security documentation to identify compliance gaps and remediation needs.
• Support continuous monitoring by tracking security posture, compliance status, and ongoing control effectiveness.
• Participate in security assessments, audits, and compliance reviews with internal and external stakeholders.
• Assist in the development of risk mitigation strategies and recommendations for security weaknesses.
• Track authorization milestones, compliance deadlines, and remediation activities to support timely completion.
• Communicate compliance status, risks, findings, and recommendations to both technical and non-technical stakeholders.
• Support audits and reporting activities related to cybersecurity requirements and organizational security programs.

Required qualifications

• U.S. Citizenship.
• Active Secret Security Clearance, or the ability to obtain one.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Sciences, or related field; or minimum 5 years of closely related experience working with Navy or DoD weapon systems, equipment, or programs.
• Experience working with NIST RMF.
• Understanding of cybersecurity principles, security controls, vulnerability management, and risk management concepts.
• Experience supporting cybersecurity compliance, security authorization, risk management, or information security programs.
• Experience maintaining documentation in DoD Enterprise Mission Assurance Support Service (eMASS).
• Subject matter expertise with NIST SP 800-53 security controls and cybersecurity compliance requirements.
• Experience developing, maintaining, or reviewing authorization package documentation, including SSPs, SARs, POA&Ms, and Risk Assessments.
• Understanding of the Authorization to Operate (ATO) process and continuous monitoring requirements.
• Experience tracking and managing POA&M findings through remediation and closure.
• Ability to review technical security information and translate findings into compliance documentation and actionable recommendations.
• Strong organizational skills to manage multiple systems, priorities, and compliance activities simultaneously.
• Strong written and verbal communication skills, including the ability to develop and review formal security documentation.
• Proficiency with MS Office applications, including Excel, Word, and PowerPoint.

Authorization package documentation

The role includes developing, reviewing, updating, and maintaining authorization package documentation, including:

• System Security Plans (SSPs)
• Security Assessment Plans (SAPs)
• Security Assessment Reports (SARs)
• Plan of Action and Milestones (POA&Ms)
• Risk Assessments
• Continuous Monitoring documentation
• Security-related policies and procedures
• Security Technical Implementation Guides (STIGs)
• Assured Compliance Assessment Solution (ACAS)
• IV&V (Independent, Verification and Validation)

Technologies

• Risk Management Framework (RMF)
• NIST SP 800-53
• Enterprise Mission Assurance Support Service (eMASS)
• Assured Compliance Assessment Solution (ACAS)
• IV&V (Independent, Verification and Validation)
• MS Office (Excel, Word, PowerPoint)

Desired qualifications

• Demonstrated experience providing cyber security support for complex military systems, preferably U.S. Navy Gun Weapon Systems.
• Relative certifications such as COMPTIA Security+ and CISCO Certified Network Associate (CCNA).

Logistics and compensation

• Location: Picatinny Arsenal, NJ (onsite)
• Travel: Up to 10%, Continental US
• Pay range: USD 86,600 - 181,800 per year
• Minimum clearance required to start: Secret

What you can expect

• A culture of integrity
• An environment of trust
• A focus on continuous growth