About This Role
Joining a mission that matters, this role supports a government DoD client by driving Authorization to Operate (ATO) outcomes. The SOC Analyst / RMF Support Specialist builds and maintains RMF packages, coordinates with enterprise stakeholders, and supports continuous monitoring activities in high-availability operational environments.
Responsibilities
- Provide on-site Risk Management Framework (RMF) support for a DoD client in Guam, including regular progress reporting to the ISSM, HQ teams, and leadership across the enterprise
- Develop new RMF artifacts and update existing documentation to support new ATOs, ongoing ATO maintenance, and reauthorization efforts
- Produce and maintain RMF documentation, including (but not limited to): Hardware and Software Lists, Network diagrams (IAW NAVFAC FRCS Diagram Requirements Job Aid), Ports, Protocols, and Services Management (PPSM) forms, Categorization forms, Cybersafe Grading Checklists, Criticality Analysis Checklist (as applicable), Security Plan (SP) and Security Assessment Plan (SAP), System-specific policies aligned to NIST 800-53 control families, Implementation and System Level Continuous Monitoring (SLCM) Plans, Raw vulnerability scan outputs and Security Center generated reports, Manual STIG/SRG checklists (CKLs)
- Perform all tasks required to support RMF packages in eMASS, including uploading artifacts in proper format and executing workflow steps to support authorization decisions
- Implement security controls aligned to STIGs/SRGs, remediate findings, and support continuous monitoring by: Patching vulnerabilities on IT/network devices and IP-based controllers, Conducting vulnerability scans across IP-based assets and producing reports, Completing manual STIG checklists (CKLs) per the approved SAP, Maintaining and updating POA&Ms, mapping vulnerabilities to controls, and inputting/uploading test results and scan results in eMASS
- Provide on-site validation support and facilitate change requests and authorization boundary updates in coordination with the Operational Technology Design Authority (OTDA)
- Collaborate across multiple departments to coordinate scanning and patching efforts
- Support intermittent nationwide travel based on site requirements and availability
Requirements
- Bachelor’s degree in IT/Cybersecurity (preferred)
- 3+ years of related experience and/or training (military or civilian)
- Demonstrated ability to support and sustain RMF/ATO documentation and workflows (including eMASS)
- Strong problem-solving skills, attention to detail, and the ability to produce accurate, audit-ready artifacts under deadlines
- Proficiency with Microsoft Office (Word, Excel, PowerPoint, Outlook)
Nice to have:
- Hands-on experience implementing STIGs and SRGs, including CKL completion and validation
