Working as a contractor for a federal civilian agency, the Cybersecurity Analyst will perform assessment and authorization (A&A) efforts under the NIST Risk Management Framework (RMF). This role conducts cybersecurity analysis in preparation for A&A, reviewing and validating associated cybersecurity documentation and technical controls.
Responsibilities
Perform assessment and authorization (A&A) efforts under the NIST Risk Management Framework (RMF)
Conduct cybersecurity analysis in preparation for A&A reviewing and validation of all associated cybersecurity documentation and technical controls
Work within a team that conducts A&A activities
Develop System Security Plans (SSP), Contingency Plans, Business Impact Analyses (BIA), Plan of Action and Milestones (POA&Ms), Security Assessment Report (SARs), Security Assessment Plan (SAPs), and other RMF documentation
Assess and mitigate system security threats/risks throughout the program life cycle
Contribute to the security planning, assessment, risk analysis, risk management, certification and awareness activities for system and networking operations
Create and review A&A Body of Evidence documentation, providing feedback on completeness and compliance of its content
Develop and execute Security Test Plan (STP) in close cooperation with team members
Manage and ensure Continuous Monitoring (CONMON) to maintain system authorization
Identify key stakeholders in A&A efforts and ensure system documentation reflects current system security configurations to include hardware and software components, data flow, interconnections, and ports, protocols, and services
Identify potential risks associated with system configurations and advise on mitigation strategies
Participate in A&A status meetings and facilitate moving systems toward a successful A&A effort
Assist to estimate Level of Effort (LOE) involved in performing A&A activities
Assist customer program offices in interpreting and applying mitigation strategies
Conduct thorough reviews of all vulnerabilities, architecture, and defense in depth strategies and report findings in POA&Ms document
Document residual risks and provide the cybersecurity risk analysis and mitigation determination results
Maintain cybersecurity policy and processes as assigned
Analyze, interpret, and apply Federal cybersecurity guidance to customer needs
Communicate the security posture of systems through designated reporting mechanism
Collaborate with other team members in cybersecurity
Requirements
5+ years of experience in the following areas: Cybersecurity policy, procedures, and processes, including RMF and NIST 800-53 and A&A's
Millions of jobs, with real people getting hired every day
200,000+
New jobs added daily
7,000,000+
Verified job listings
1,000,000+
Tailored applications submitted
Experience developing A&A documentation from scratch and performing assessments; RMF step 1 through 4
Familiar with NIST publications, specifically RMF and NIST controls
Minimum DoD 8570 Information Assurance Management Technology (IAM) level II
Familiar with dealing with defense-in-depth, and other information security and assurance principles and associated supporting technologies
Hands on experience and detailed familiarity with the A&A processes
Experience working in Xacta, Greenlight/Roadrunner
Excellent customer service and organization skills
Must demonstrate proficiency in the following areas: multi-tasking, critical thinking; and the ability to work quickly, efficiently and accurately in a dynamic and fluid environment
Must have a Top-Secret Clearance with polygraph
Must be able to read, speak, write, and understand the English language
Nice to have:
One or more of the following certifications preferred (Security+, CAP, CISSP, CISM, GSEC, GCIH, or GSLC)
BA/BS Degree
Excellent oral and written communication skills
Ability to interact and relay security technical requirements at all levels of leadership and work force
Ability to work both independently and as a member of a team
Benefits
Health, dental, and vision insurance
Paid time off and holidays
Retirement benefits (including 401(k) matching)
Educational reimbursement
Parental leave
Employee stock purchase plan
Tax-saving options
Disability and life insurance
Pet insurance
Important Details
Application deadline: Until Filled
About the Company
Amentum is a premier government contractor that delivers trailblazing solutions with unwavering integrity and embraces inclusion and collaboration. They are purpose-driven with a fierce commitment to deliver on their promises, helping customers solve today's and tomorrow's problems.
