Cybersecurity Analyst (Risk Management Framework)

Job Description

Job Description

Locations: Annapolis Junction, MD; Sterling, VA

Position Overview

DAn Solutions is seeking an experienced Cybersecurity Analyst specializing in Risk Management Framework (RMF) to support cybersecurity and information assurance activities within a mission-critical Department of Defense environment.

The Cybersecurity Analyst will support the security posture of enterprise information systems by conducting risk and vulnerability assessments, supporting authorization activities, maintaining cybersecurity documentation, and ensuring systems comply with applicable DoD security requirements.

Responsibilities

• Support implementation and maintenance of the DoD Risk Management Framework (RMF) and information assurance requirements.
• Perform cybersecurity, Information Assurance (IA), and Computer Network Defense (CND) activities supporting enterprise systems and environments.
• Conduct vulnerability and risk assessments and analyze findings to support system authorization and ongoing risk management.
• Support security assessments, certification testing, vulnerability management, and remediation activities.
• Develop, review, and maintain cybersecurity documentation, including:
  • System Security Plans (SSPs)
  • Risk Assessment Reports
  • Authorization/assessment documentation
  • System Requirements Traceability Matrices (SRTMs)
• Evaluate proposed security solutions to determine whether they meet requirements for systems processing classified information.
• Maintain the operational security posture of assigned systems and ensure established cybersecurity policies, standards, and procedures are followed.
• Assess the cybersecurity impact of hardware, software, firmware, configuration, and system changes.
• Support configuration management activities associated with information system security.
• Coordinate with customers, technical teams, engineers, and Government stakeholders to identify and address cybersecurity requirements.
• Provide technical guidance to junior cybersecurity personnel and support multiple technical activities or projects.
• Serve in an ISSM-level capacity when required by the program.

The PWS specifically requires compliance with applicable DoD/DIA security requirements and identifies DoDI 8510.01 RMF requirements as part of the engineering/design process.

Required Experience & Education

Candidates must meet one of the following combinations:

• High School Diploma + 10 years of relevant experience
• Associate's Degree + 8 years
• Bachelor's Degree + 6 years
• Master's Degree + 4 years
• PhD + 2 years

Certifications

• DoD 8570/8140-compliant Information Assurance certification appropriate to the position and technical environment.
• Additional applicable cybersecurity, software, or hardware certifications may be required based on the assigned environment.

 

Salary Range Disclaimer: The posted salary range represents the good-faith minimum and maximum compensation DAn Solutions expects to pay for this position. The position may be filled at different Labor Category (LCAT) levels depending on the selected candidate's qualifications and applicable contract requirements. Final compensation within the posted range will be determined based on the applicable LCAT and factors including education, relevant experience, certifications, and other required qualifications