Risk Management Framework Cybersecurity Analyst

What you'll do

• Lead and drive RMF and Authorization to Operate (ATO) processes across the entire system lifecycle.
• Manage cybersecurity assessments and Assessment & Authorization (A&A) activities for multiple systems.
• Enforce compliance with CNSSI-1253, NIST 800-37, and NIST 800-53 standards.
• Validate security control implementations and develop technical remediation strategies based on system testing.
• Analyze ACAS scans, STIGs, and security controls to identify vulnerabilities and engineer mitigations.
• Develop RMF body of evidence documentation including System Security Plans (SSP) and Control Family Plans.
• Manage and submit RMF ATO packages within the Enterprise Mission Assurance Support Service (eMASS).
• Translate complex technical risks into clear cybersecurity status reports for stakeholders and Authorizing Officials.

What we're looking for

• 3+ years of experience in Risk Management Framework (RMF) Assessment and Authorization (A&A).
• Experience executing manual and automated A&A processes, including developing localized workflows and manual artifact generation.
• Experience independently developing cybersecurity RMF body of evidence documentation such as System Security Plans and RMF Control Family Plans.
• Knowledge of developing, managing, and submitting RMF ATO packages within the eMASS system.
• HS diploma or GED.
• Experience formally serving as an ISSO, ISSM, or ISSE (preferred).
• Experience with USCG RMF processes, STIGs, SCAP, ACAS, VRAM, HBSS, and PPSM matrix (preferred).
• TS/SCI clearance.