RMF Cybersecurity Analyst

The RMF Cybersecurity Analyst will support the DCSA program at ASRC Federal, based in Quantico, VA with a hybrid work arrangement. The role focuses on Risk Management Framework (RMF) activities across multiple programs, systems, or enclaves, including cybersecurity policy enforcement, documentation, and authorization support.

Key Responsibilities

• Manage Risk Management Framework (RMF) support across multiple programs, systems, or enclaves by proposing, coordinating, implementing, and enforcing cybersecurity policies, standards, and methodologies for information systems or enclave environments.
• Provide cybersecurity documentation support, Plan of Actions & Milestones (POAM), enterprise mission assurance support service (eMASS) submissions, and system security engineering efforts.
• Prepare and review documentation that includes Systems Security Plans (SSPs) and Security Assessment & Authorization (SA&A) packages in alignment with DoD RMF procedures.
• Develop, maintain, and provide for Government review the DoD and other federal agency-specific documentation required under the Government A&A Framework and DoDI 8510.01, as applicable.
• Provide Cyber IT analysis results and test reports for Government approval.
• Prepare enterprise-wide SOPs and reporting for high-level officials.

Required Qualifications

• Knowledge of RMF, STIGs, and eMASS or similar tools such as Xacta or CSAM.
• Knowledge of DISA Security Technical Information Guides, RMF, NIST SP 800-53, vulnerability tools, and other applicable DoD cybersecurity policies.
• Skilled in preparing and reviewing documentation, including SSPs and SA&A packages, according to DoD RMF procedures.
• Experience developing, updating, and submitting for Government review DoD and other federal agency-specific documentation required by the Government A&A Framework and DoDI 8510.01, as applicable.
• Experience providing Cyber IT analysis results and test reports for Government approval.
• Strong writing skills, including the ability to prepare enterprise-wide SOPs and reports for senior stakeholders.
• At least two (2) years of system-level Cybersecurity RMF experience.
• Bachelor’s Degree (or equivalent experience) in cybersecurity and/or information systems management, information technology.
• 8570 IAM/IAT Level I certification (or required equivalent), such as A+CE, Network+ CE, SSCP, CCNA-Security, CAP, GSLC, Security+ CE or higher.
• Active Secret Required with eligibility for TS.
• If working from an alternate site other than DCSA facilities or corporate office space, reliable ability to communicate over voice (cell phone preferred) and maintain stable, capable internet connectivity.
• Ability to speak English well enough to communicate complex technical ideas to a diverse customer in both verbal and written formats.

Tools and Technologies

• Risk Management Framework (RMF)
• STIGs
• eMASS
• Xacta
• CSAM
• DISA Security Technical Information Guides
• NIST SP 800-53
• Vulnerability Tools
• Plan of Actions & Milestones (POAM)
• Systems Security Plans (SSPs)
• Security Assessment & Authorization (SA&A)
• Government A&A Framework
• DoDI 8510.01
• DoD Risk Management Framework (RMF)
• 8570 IAM/IAT Level I and related certifications (A+CE, Network+ CE, SSCP, CCNA-Security, CAP, GSLC, Security+ CE)

Work Location and Schedule

• Quantico, VA (hybrid)
• Primarily a telework position with a requirement to be onsite at least two (2) days per week, subject to change based on Government direction.

Benefits

• Health care
• Dental
• Vision
• Life insurance
• 401(k)
• Education assistance
• Paid time off including PTO
• Holidays
• Any other paid leave required by law

Clearance

• Active Secret Required and eligibility for TS

Certification Requirement

• 8570 IAM/IAT Level I (or required equivalent), such as A+CE, Network+ CE, SSCP, CCNA-Security, CAP, GSLC, Security+ CE or higher.