RMF Cyber Security Analyst

Delaware Nation Industries is supporting the Naval Surface Warfare Center Dahlgren Division Dam Neck Activity (NSWC DD DNA) by providing enterprise management and technical support, including policy, procedures, seat refresh, engineering/technical solutions, ordering to Next Generation Enterprise Network (NGEN), and the Naval Networking Environment (NNE) strategy. Job Summary The RMF Analyst will assist in developing RMF accreditation packages and maintain Authorization to Operate (ATO) certifications for networked systems and applications used by the organization. The RMF Analyst will help develop information system documentation and provide a designated set of common controls for the authorization package, including the executive summary, system security plan, privacy plan, security control assessment, privacy control assessment, and relevant plans of action and milestones. This documentation must comply with DoD and Civilian Agency policy, focusing on NIST 800-37 and NIST 800-53 rev 4. Responsibilities Monitor and assess existing Information Security Management and Security Technical Architecture, regulations, and controls (FIPS, NIST, DISN Connection Process Guide (CPG), Navy RMF Process Guide (RPG), Navy Testing Guidance) Assess proposed Information Security Management and Security Technical Architecture, regulations, and controls (FIPS, NIST, DISN CPG, Navy RPG, Navy Testing Guidance) Maintain regular meetings/notes and informal dialogue with RDT&E CORE/LAB managers and ISSOs to keep them abreast of upcoming Information System Security Manager (ISSM) requirements and to gather specifics on their capability and core support requirements and trends Maintain records in the Enterprise Mission Assurance Support Service (eMASS) Evaluate technical testing from Assured Compliance Assessment Solution (ACAS) scans, Evaluate STIG, eMASSter), and Security Technical Implementation Guide Viewer tool using FMATS or other NAVSEA or DoD-approved toolset Monitor security access, passwords, badges, log‑ins, to keep a site or system safe Use firewalls and information security standards to keep the organization secure Perform security assessments, vulnerability testing and risk analysis Conduct security audits internally and externally Identify the cause of security breaches Requirements DoD Top Secret Security Clearance 5+ Years of Experience in Cyber Security Cyber Security Workforce level IAM II/III CASP, CISM, or CISSP required Bachelor Degree or Equivalent Work Experience Familiarity with NIST IT Security Special Publication (SP) 800 Series with emphasis on NIST SP 800-37 and NIST SP 800-53 rev 4/5 Forensics analysis familiarity Experienced STIG reviewer Microsoft Visio and Microsoft Project user Desired Navy Qualified Validator (NQV) Level II Familiarity with ACAS, RedSeal, and Carbon Black Familiarity with the Vulnerability Remediation Asset Manager (VRAM) web tool Familiarity with the Continuous Monitoring and Risk Scoring (CMRS) web tool #J-18808-Ljbffr