RMF Cybersecurity Analyst (Linux Systems)
About The Position
i3 is seeking an RMF Cybersecurity Analyst with Linux expertise to support an Army program focused on Risk Management Framework (RMF) compliance and continuous monitoring of Linux-based systems. This role is cybersecurity-first, with primary responsibility for vulnerability management, STIG compliance, and RMF artifact development, supporting enterprise Linux environments within a secure DevSecOps infrastructure. The selected candidate will work closely with cybersecurity, system engineering, and operations teams to ensure Linux systems meet DoD RMF requirements, maintain compliance, and support Authorization to Operate (ATO) objectives. Candidates must possess a United States SECRET security clearance.
Requirements
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field with 6+ years of experience, or 10+ years equivalent experience.
- Strong hands-on experience with:
- Nessus / ACAS vulnerability scanning
- STIG implementation and validation
- POA&M development and management
- RMF processes and continuous monitoring
- Familiarity with:
- NIST 800-53 controls
- eMASS or equivalent RMF tools
- Experience working within DoD RMF environments (ATO lifecycle).
- Experience administering Linux systems (RHEL preferred).
- Ability to interpret and remediate security findings on Linux platforms.
- Must meet DoD 8140 (IAT Level II or higher) requirements (e.g., Security+, SSCP, GSEC).
- U.S. Citizenship required.
- Active Secret clearance required. Must be able to maintain the security clearance required for this position.
Nice To Haves
- Familiarity with:
- Red Hat Satellite
- OpenShift / Kubernetes environments
- DevSecOps pipelines
- Experience supporting Army or DoD enterprise environments.
- Experience with automation tools (Ansible, Terraform) for remediation.
- Linux certification (e.g., RHCSA, Linux+).
- Understanding of Zero Trust architecture principles.
Responsibilities
- Perform vulnerability scanning using Nessus (ACAS) across Linux environments.
- Analyze scan results and conduct vulnerability triage and prioritization.
- Execute and track scan remediation activities in coordination with system owners and engineers.
- Develop, maintain, and validate Plan of Action and Milestones (POA&M) artifacts.
- Apply and validate DISA STIGs for Linux operating systems (e.g., RHEL 8/9).
- Support RMF 2.0 lifecycle activities, including:
- Control implementation
- Continuous monitoring
- Security control assessments
- Maintain and update eMASS artifacts, including controls, vulnerabilities, and system status.
- Support Independent Security Assessments (ISA) and ATO sustainment activities.
- Ensure alignment with NIST 800-53 / CNSSI 1253 controls and DoD cybersecurity policies.
- Administer and maintain Linux systems (RHEL/CentOS) in secure environments.
- Implement and validate security hardening configurations.
- Support patching and configuration management to remediate vulnerabilities.
- Assist with system baselining and compliance validation.
- Collaborate with DevSecOps teams to integrate security into CI/CD pipelines.
- Support the automation of remediation activities using tools such as Ansible.
Benefits
- Long-term financial security
- Higher job satisfaction
- Greater job security
- Personal and professional growth
- Great company culture
- Excellent insurance coverage
- 401(k) match
- Generous PTO
- Health and wellness incentives
- Tuition and certification reimbursement
- Countless opportunities to give back to the community through i3 Cares
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Number of Employees
11-50 employees
