Cybersecurity Analyst

The RMF Cybersecurity Analyst II supports Risk Management Framework (RMF) compliance activities, cyber compliance processes, and incident response efforts for networked systems and applications used by the organization. This role is responsible for maintaining RMF documentation and supporting records, supporting audit and review activities, tracking cyber-related workflows, and assisting with software and license compliance activities. The ideal candidate is an experienced cyber professional with knowledge of RMF processes, cybersecurity documentation, and compliance tools who can work effectively with technical staff, compliance personnel, and stakeholders in a regulated environment.

Key Responsibilities

• Support RMF compliance activities, including review of policy documents, package materials, supporting records, and maintenance of RMF artifacts and eMASS records
• Support RMF package reviews, laboratory audit activities, and follow-up documentation requirements
• Review, monitor, and track cyber-related tickets, incident response actions, and associated workflows
• Support cyber compliance activities related to software and license records, unit-level audits, STIG remediation, and documentation updates
• Work with technical staff, compliance personnel, and stakeholders to collect required information, identify documentation gaps, and support follow-up actions

Requirements

• Bachelor’s degree or equivalent work experience
• 3–5 years of relevant experience in cybersecurity, RMF, cyber compliance, incident response support, vulnerability management, or related cyber operations
• Must possess an active DoD 8570.01-M IAT Level II certification, such as Security+
• Familiarity with NIST SP 800-37 and NIST SP 800-53 Revision 5
• Experience maintaining cybersecurity documentation, supporting artifacts, and records in eMASS or similar compliance environments
• Familiarity with ACAS, Trellix ePO, STIG compliance, and cyber-related ticket workflows
• Ability to work effectively with technical staff, compliance personnel, and stakeholders in a regulated environment
• Must possess or be able to obtain any required security clearance or access required for the position

Preferred Qualifications

• Experience supporting RMF packages, POA&M updates, security control documentation, or audit follow-up activities
• Experience supporting laboratory, research, or other regulated IT environments
• Familiarity with incident documentation, vulnerability tracking, forensics concepts, or Department of War cybersecurity compliance processes