Cybersecurity Analyst (Risk Management Framework)

DAn Solutions•Annapolis Junction, MD

2d•Onsite

About The Position

DAn Solutions is seeking an experienced Cybersecurity Analyst specializing in Risk Management Framework (RMF) to support cybersecurity and information assurance activities within a mission-critical Department of Defense environment. The Cybersecurity Analyst will support the security posture of enterprise information systems by conducting risk and vulnerability assessments, supporting authorization activities, maintaining cybersecurity documentation, and ensuring systems comply with applicable DoD security requirements.

Requirements

High School Diploma + 10 years of relevant experience OR Associate's Degree + 8 years OR Bachelor's Degree + 6 years OR Master's Degree + 4 years OR PhD + 2 years
DoD 8570/8140-compliant Information Assurance certification appropriate to the position and technical environment.
Additional applicable cybersecurity, software, or hardware certifications may be required based on the assigned environment.

Responsibilities

Support implementation and maintenance of the DoD Risk Management Framework (RMF) and information assurance requirements.
Perform cybersecurity, Information Assurance (IA), and Computer Network Defense (CND) activities supporting enterprise systems and environments.
Conduct vulnerability and risk assessments and analyze findings to support system authorization and ongoing risk management.
Support security assessments, certification testing, vulnerability management, and remediation activities.
Develop, review, and maintain cybersecurity documentation, including: System Security Plans (SSPs), Risk Assessment Reports, Authorization/assessment documentation, System Requirements Traceability Matrices (SRTMs).
Evaluate proposed security solutions to determine whether they meet requirements for systems processing classified information.
Maintain the operational security posture of assigned systems and ensure established cybersecurity policies, standards, and procedures are followed.
Assess the cybersecurity impact of hardware, software, firmware, configuration, and system changes.
Support configuration management activities associated with information system security.
Coordinate with customers, technical teams, engineers, and Government stakeholders to identify and address cybersecurity requirements.
Provide technical guidance to junior cybersecurity personnel and support multiple technical activities or projects.
Serve in an ISSM-level capacity when required by the program.
The PWS specifically requires compliance with applicable DoD/DIA security requirements and identifies DoDI 8510.01 RMF requirements as part of the engineering/design process.