Cyber Security RMF Analyst

MANTECH•Stafford, VA

2d•$83,300 - $139,800•Onsite

About The Position

MANTECH is seeking a motivated, customer-oriented Cyber Security RMF Analyst to support its Marine Corps Systems Command (MCSC) contract in Quantico, Virginia. The role analyzes cybersecurity packages using the Risk Management Framework (RMF) process to help achieve an Authority to Operate (ATO). The position is listed as onsite in Stafford, Virginia, and requires a current, active Secret clearance with the ability to obtain Top Secret/SCI. The analyst reviews system security documentation and configurations, assesses compliance with federal cybersecurity requirements, identifies implementation gaps, and recommends solutions. The role also supports the preparation and review of authorization and assessment artifacts, researches challenges related to changing FISMA requirements, and maintains GRC SharePoint content. This is a full-time position. The projected compensation range is $83,300–$139,800. Benefits may include health and life insurance, paid time off, holiday pay, short- and long-term disability, retirement and savings, learning and development opportunities, wellness programs, and optional benefit elections, depending on position.

Requirements

Bachelor’s degree and at least 3 years of related cybersecurity experience; an additional 2 years of experience may substitute for the degree.
Compliance with DoD 8140 at an intermediate or advanced level, with a CASP+CE, Security+, CISSP, or CISM certification.
Expert knowledge of NIST guidelines, FISMA, cybersecurity principles and methodologies, Executive Orders, OMB memoranda, Federal, DoD, and CISA Technical Reference Architectures, maturity models, RMF, CSF, and IT systems.
Current, active Secret clearance with the ability to obtain Top Secret/SCI.
Sedentary work.

Nice To Haves

USMC or Navy Validator certification.
OSCP, OSEP, or CPTS certifications.
Experience with cloud-based environments and technologies.
Analytical mindset and excellent problem-solving ability.
Good communication, interpersonal, organizational, and analytical skills.

Responsibilities

Ensure system documentation reflects current security configurations, including hardware and software components, data flow, interconnections, and ports, protocols, and services.
Perform compliance reviews and analyses to verify compliance with federal requirements, including Executive Orders, OMB memoranda, A-130, NIST SP 800-37, NIST SP 800-53, FIPS 199, and FIPS 200.
Analyze security implementations for assigned systems across people, processes, and technologies; identify gaps and recommend solutions.
Assist in preparing and reviewing System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), Authorization Recommendations (ARs), Cybersecurity Strategies (CSSs), and other assessment and authorization artifacts.
Research major obstacles arising from changing FISMA requirements and provide recommendations to customers.
Provide ongoing updates and input to GRC SharePoint sites, including document uploads, page updates, access requests, and permissions.