Information Security Analyst, Intermediate

Resource Management Concepts, Inc.•Saint Inigoes Shores, MD

2d•$90,000 - $120,000

About The Position

Resource Management Concepts, Inc. (RMC) is hiring an Information Security Analyst with Risk Management Framework (RMF) experience to support a customer in Saint Inigoes, Maryland. The role provides cybersecurity analysis, engineering, and certification and accreditation (C&A)/Assessment and Authorization (A&A) support in accordance with National Institute of Standards and Technology (NIST), RMF, or Platform Information Technology (PIT) methodologies. The analyst supports the protection of complex Department of Defense (DoD) communication systems and networks by planning, implementing, upgrading, and monitoring security measures. The role assesses information assurance (IA) posture, supports system certification and accreditation, maintains C&A packages, and develops and maintains IA documentation supporting compliance with applicable standards. An active DoD Secret clearance is required to start. Occasional travel is required. RMC describes its workplace as having a small-company feel and offers resources for employee training, certification, education, and career growth.

Requirements

A bachelor's degree in Information Technology, Cybersecurity, Data Science, Information Systems, Computer Science, or a related field; alternatively, at least four years of experience and a CASP+ certificate may substitute for the degree.
Experience supporting Army RMF packages.
Experience with the DSS RMF process, DISA ACAS, and DoD IA compliance standards.
Security+ CE/DoD 8570.01 IAT-III compliance.
Knowledge of Navy IT/IA policies and procedures.
An active DoD Secret clearance is required to start, and the applicant must meet eligibility requirements for access to classified information.
Knowledge and proficiency in RMF processes.
Knowledge and proficiency with cybersecurity/A&A tools, including eMASS, eMASSter, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio.
Knowledge and proficiency with IT systems and subsystems, project management, written and verbal communications, teamwork, and collaboration.
Familiarity working with classified systems, such as SIPRNet, in secure environments.
Ability to travel occasionally.

Responsibilities

Plan, implement, upgrade, and monitor security measures protecting complex DoD communication systems and networks.
Assess the IA posture of DoD communications systems and networks in support of system certification and accreditation.
Maintain and support current and ongoing C&A packages.
Develop and maintain system IA documentation supporting certification of compliance with applicable standards.
Provide cybersecurity analysis, engineering, and C&A/A&A support in accordance with NIST, RMF, or PIT methodologies.