Cybersecurity RMF Analyst

SAIC • Colorado Springs, CO

13h • Onsite

About The Position

SAIC is seeking qualified applicants for RMF Analyst to provide Risk Management Framework (RMF) in support of the North American Aerospace Defense Command/United States Northern Command (N&NC) Information Technology (IT) Enterprise Services (NITES) contract, with primary work onsite in Colorado Springs. The candidate selected for this position will be responsible for the following: Supporting the Risk Management Framework (RMF) process for the N&NC Enterprise by maintaining system registration and records within eMASS. Ensuring cybersecurity standards are consistently met to maintain a Cyber Operational Readiness Assessment (CORA) ready status. Managing continuous Cyber Security posture of enterprise systems and identify mitigations to meet DoDD 8500.01, DoDI 8510.01, DoDD 8140.01, and NIST SP800-53. Analyzing scans from ACAS, SCAP, and other approved tools to determine security posture of systems to develop/maintain Authority to Operate (ATO) for systems and enclaves. Determining system categorization in accordance with CNSSI 1253 in areas of confidentiality, integrity, and availability as information types and system interconnections change. Managing the development and maintenance of system security plans, ensuring proper Security Technical Implementation Guides (STIGs) are applied for each system and enclave. Ensuring all findings are properly documented in the Plan of Action and Milestones (POA&M) on an on-going basis. Creating and refining correct policies, procedures, and artifacts necessary to ensure controls are met. SAIC accepts applications on an ongoing basis and there is no deadline. SAIC® is a premier Fortune 500® mission integrator focused on advancing the power of technology and innovation to serve and protect our world. Our robust portfolio of offerings across the defense, space, civilian and intelligence markets includes secure high-end solutions in mission IT, enterprise IT, engineering services and professional services. We integrate emerging technology, rapidly and securely, into mission critical operations that modernize and enable critical national imperatives. We are approximately 24,000 strong; driven by mission, united by purpose, and inspired by opportunities. SAIC is an Equal Opportunity Employer. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $7.5 billion. For more information, visit saic.com . For ongoing news, please visit our newsroom .

Requirements

• Certification required per DoDD 8140.03, Intermediate Level (Security+ or equivalent)
• BS or equivalent work experience in the Information Assurance / Cybersecurity field
• 5+ years of overall IT security experience
• 2+ years of experience as an ISSO for DoD systems
• Direct experience in RMF artifacts and eMASS tracking of records
• Experience creating, tracking, and completion of Plans of Action and Milestones (POA&Ms) for resolving security control deficiencies
• TS/SCI security clearance
• Provide status updates to System Owners and leadership

Nice To Haves

• Ability to work in a team focused, dynamic environment
• Experience using STIG Viewer
• Familiar with Assess Only Records IAW 8510.01
• Exposure/Prior Experience participating in Change Advisory Boards

Responsibilities

• Supporting the Risk Management Framework (RMF) process for the N&NC Enterprise by maintaining system registration and records within eMASS.
• Ensuring cybersecurity standards are consistently met to maintain a Cyber Operational Readiness Assessment (CORA) ready status.
• Managing continuous Cyber Security posture of enterprise systems and identify mitigations to meet DoDD 8500.01, DoDI 8510.01, DoDD 8140.01, and NIST SP800-53.
• Analyzing scans from ACAS, SCAP, and other approved tools to determine security posture of systems to develop/maintain Authority to Operate (ATO) for systems and enclaves.
• Determining system categorization in accordance with CNSSI 1253 in areas of confidentiality, integrity, and availability as information types and system interconnections change.
• Managing the development and maintenance of system security plans, ensuring proper Security Technical Implementation Guides (STIGs) are applied for each system and enclave.
• Ensuring all findings are properly documented in the Plan of Action and Milestones (POA&M) on an on-going basis.
• Creating and refining correct policies, procedures, and artifacts necessary to ensure controls are met.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level