Cybersecurity Analyst / RMF (ISSO)

PEOPLE TECHNOLOGY AND PROCESSES LLC • Aberdeen Proving Ground, MD

9d • $111,000 - $126,000 • Onsite

About The Position

Executes the enterprise cybersecurity program, maintaining continuous Authority to Operate for multiple ATEC systems through the Risk Management Framework and eMASS, and performing security operations and vulnerability management. Responsibilities include (but are not limited to): Execute RMF tasks to achieve and maintain continuous ATO without lapse for designated ATEC systems Create and maintain policies, procedures, diagrams, hardware and software listings, and all ATO package artifacts Manage eMASS packages, POA&Ms, and control assessments and submit renewal packages no less than six months before expiration Perform security operations with 15-minute critical and 1-hour high incident response, remediating Critical/High vulnerabilities within 30 days Run ACAS and SCAP scans, manage endpoint security and network access control, and support the DoD Cybersecurity Hygiene Scorecard Perform application security static and dynamic code analysis and threat modeling

Requirements

• High school diploma or equivalent (minimum)
• U.S. citizenship
• Ability to speak, read, write, and understand English proficiently
• Proficiency with computers and Microsoft Office software
• Active Secret clearance; Top Secret / SCI eligibility (Tier 5 / T5R) required for critical- or special-sensitive cybersecurity duties
• DoD 8140 / 8570.01-M baseline certification appropriate to the assigned work role and level, held prior to performance, with the required computing environment (CE) certification obtained within six (6) months of appointment.
• OPSEC Level II certification required for the designated OPSEC Coordinator

Responsibilities

• Execute RMF tasks to achieve and maintain continuous ATO without lapse for designated ATEC systems
• Create and maintain policies, procedures, diagrams, hardware and software listings, and all ATO package artifacts
• Manage eMASS packages, POA&Ms, and control assessments and submit renewal packages no less than six months before expiration
• Perform security operations with 15-minute critical and 1-hour high incident response, remediating Critical/High vulnerabilities within 30 days
• Run ACAS and SCAP scans, manage endpoint security and network access control, and support the DoD Cybersecurity Hygiene Scorecard
• Perform application security static and dynamic code analysis and threat modeling

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: High school or GED