Systems Security Analyst [Various Levels] Contingent

Lufco•Belleville, IL

1d•$95,000 - $110,000

About The Position

This Position Description establishes the technical requirements, core duties, governance parameters, and qualification standards for the Systems Security Analyst supporting the customer. The Capability Area is Cybersecurity Operations - RMF & Compliance. The DCWF Work Role Code is 651 - Systems Security Analyst, with a Minimum Proficiency Level of Intermediate. This is not a Key Personnel Designation role and is classified under Phase I Pre-Convergence Service.

Requirements

Associate’s or Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, or a related technical field.
Minimum of 4 years of hands-on experience developing RMF documentation, executing IA assessments, managing eMASS workflows, and operating ACAS vulnerability scanning suites.
Must hold active residential qualification credentials and foundational DCWF certifications appropriate for the Intermediate proficiency level.
Active Secret clearance required prior to contract start; Top Secret/SCI eligible.
Must complete full vetting through DISS and MP ICAM prior to issuance of Common Access Card (CAC) and elevated system access privileges.

Nice To Haves

CySA+
CCNP Security
CISA
CGRC
CISSP
CISM
SecurityX

Responsibilities

Develops, updates, and maintains complete RMF artifact packages within the Enterprise Mission Assurance Support Service (eMASS) to achieve and sustain Authorizations to Operate (ATOs) across all in-scope systems, applications, and network enclaves.
Conducts automated and manual vulnerability assessments using Assured Compliance Assessment Solution (ACAS / Tenable Security Center) and delivers monthly STIG/SCAP Compliance Reports.
Formulates weekly Vulnerability Index (VI) reports alongside Plans of Action & Milestones (POA&Ms) via CDRL A020, and tracks non-compliant devices subject to network isolation via Weekly Quarantine Reports.
Maintains eMASS system documentation and ensures strict operational alignment with DD Form 254 guidelines, AR 380-5, and DoDI 5200.48 Controlled Unclassified Information (CUI) policies.