RMF Cybersecurity Analyst

ASRC Federal•Quantico, VA

3d•$112,036 - $141,087•Hybrid

About The Position

ASRC Federal is hiring an RMF Cybersecurity Analyst to support its Defense Counterintelligence and Security Agency (DCSA) program in Quantico, Virginia. The analyst will help ensure DCSA cybersecurity and compliance by managing Risk Management Framework (RMF) support for multiple programs, systems, or enclaves. This includes assisting with the proposal, coordination, implementation, and enforcement of information-system and enclave cybersecurity policies, standards, and methodologies. The position is primarily telework, with onsite work required at least two days per week at Quantico Marine Corps Base. This requirement may change based on government direction. When working from an alternate site outside DCSA facilities or corporate office space, the employee must have reliable voice communications and a stable, capable internet connection. The role requires communicating complex technical ideas in spoken and written English to diverse customers. The role requires an active Secret clearance and eligibility for Top Secret. ASRC Federal offers competitive pay and benefits; the salary offered depends on factors including experience, skills, education, geographic location, internal equity, and business needs.

Requirements

At least two years of system-level Cybersecurity Risk Management Framework (RMF) experience.
Knowledge of RMF, STIGs, and eMASS or similar tools such as Xacta or CSAM.
Knowledge of DISA Security Technical Implementation Guides, RMF, NIST SP 800-53, vulnerability tools, and applicable DoD cybersecurity policies.
Experience developing cybersecurity documentation, Plans of Action & Milestones (POA&Ms), eMASS submissions, and system security engineering materials.
Experience preparing and reviewing SSPs and SA&A packages in accordance with DoD RMF procedures.
Experience developing and updating DoD and other federal agency-specific documentation for Government review.
Experience providing Cyber IT analysis results and test reports for government approval.
Strong writing skills, including experience preparing enterprise-wide SOPs and reports for high-level officials.
Bachelor’s degree or equivalent experience in Cybersecurity, Information Systems Management, or Information Technology.
An 8570 IAM/IAT Level I certification or required equivalent, such as A+ CE, Network+ CE, SSCP, CCNA-Security, CAP, GSLC, or Security+ CE or a higher-level certification.
Active Secret clearance and eligibility for Top Secret.
Ability to communicate complex technical ideas in spoken and written English to diverse customers.
For work from an alternate site outside DCSA facilities or corporate office space, reliable voice communications and a stable, capable internet connection.

Responsibilities

Manage RMF support for multiple programs, systems, or enclaves.
Assist in proposing, coordinating, implementing, and enforcing information-system or enclave cybersecurity policies, standards, and methodologies.
Develop cybersecurity documentation, POA&Ms, eMASS submissions, and system security engineering materials.
Prepare and review Systems Security Plans (SSPs) and Security Assessment & Authorization (SA&A) packages in accordance with DoD RMF procedures.
Develop and update DoD and other federal agency-specific documentation for Government review, as specified in the Government A&A Framework and DoDI 8510.01, as applicable.
Provide Cyber IT analysis results and test reports for government approval.
Prepare enterprise-wide SOPs and reports for high-level officials.