Job Details

About the role

Seeking a mid-level Cybersecurity Analyst to support RMF activities for DHA systems and applications. The ideal candidate will have strong experience in cybersecurity risk management, compliance, and continuous monitoring, working remotely to ensure secure operation and maintenance of DHA environments. This role offers the opportunity to work with diverse security technologies and collaborate with stakeholders to enhance cybersecurity posture.

Job Responsibilities

• Develop and maintain DHA cybersecurity programs, including architecture, policies, and procedures.
• Maintain cybersecurity documentation repositories such as eMASS.
• Coordinate cybersecurity inspections, tests, reviews, and continuous monitoring activities.
• Provide technical advisory support to assigned sites and ISSMs.
• Review and provide input on Plans of Action and Milestones (POA&Ms).
• Contribute to the development of CCI metrics, policies, and procedures.
• Monitor compliance with organizational cybersecurity policies and report incidents.
• Provide guidance on CMRS tagging, TASKORD, and IAVM requirements.
• Conduct cybersecurity risk assessments and provide recommendations to government leadership.

Required skills

Risk Management Framework (RMF) DHA cybersecurity systems Security+ CE certification Cybersecurity documentation management Continuous monitoring Incident reporting Certification and accreditation processes Cybersecurity policy development Technical advisory Security clearance management

Preferred skills

eMASS Cybersecurity metrics development CMRS tagging TASKORD compliance IAVM requirements

Education requirements

Degree

Bachelor

Job Requirements

• Minimum 5 years of experience with RMF process or equivalent relevant experience.
• At least 5 years of experience working with DHA systems or equivalent.
• Active Secret Clearance.
• Bachelor's degree or equivalent.
• Must meet DoD 8570 IAM Level I requirements with Security+ CE certification or equivalent.
• Strong knowledge of cybersecurity architecture, policies, and continuous monitoring.
• Ability to coordinate cybersecurity inspections, tests, and reviews with multiple stakeholders.
• Excellent communication and technical advisory skills.
• Proactive in monitoring compliance and reporting cybersecurity incidents.
• Capable of providing risk assessments, certification, and accreditation support.