Job Requirements
Fort Meade, MD Chambersburg, PA Ogden, UT Oklahoma City, OK Arlington, VA
Top Secret/SCI Polygraph not specified
Mid Level Career (5+ yrs experience)
$113,000 - $126,000
Job Description
Cybersecurity Analyst — RMF / A&A (TS/SCI)
Join the team that authorizes the DoD's commercial cloud. You will assess Cloud Service Provider offerings
against the DoD Cloud Computing SRG at Impact Levels 4, 5, and 6, supporting the Government's assessment and authorization (A&A) mission under the Risk Management Framework. Five openings — a rare chance to join a full cyber team at stand-up.
How You'll Make an Impact
• Evaluate CSP deliverables and Provisional Authorization documentation for compliance with DoD CSP
SRG IL4/IL5/IL6.
• Analyze A&A packages against contract security requirements and draft compliance assessment
methodologies.
• Coordinate verification of CSP requirements in Government tracking tools (eMASS, ACAS, CMRS, and
related systems).
• Facilitate authorization process syncs, user community round tables, and CSP engagement on
compliance status.
• Research cloud security trends, validate system configurations and logs, and support CSSP and network
defense troubleshooting.
What You'll Need to Join the Team
• Bachelor's degree + 4 years of experience, OR 8 years total in cybersecurity assessment and authorization (RMF, NIST SP 800-53, DoD compliance).
• Active TS/SCI clearance
• Meets DoD 8140 requirements for Work Role 612, Security Control Assessor (Intermediate); alternate
Work Role 722, ISSM.
What Sets You Apart
• Hands-on eMASS package development and workflow management experience.
• Experience assessing CSPs or cloud systems under the DoD Cloud Computing SRG or FedRAMP.
• Working knowledge of STIGs, ACAS/Nessus scanning, and POA&M management.
Certifications (examples of approved options)
DoD 8140 WRC 612 (Intermediate) examples: ISC2 CGRC (formerly CAP), ISACA CISA, CompTIA SecurityX
(formerly CASP+), CISSP.
Join the team that authorizes the DoD's commercial cloud. You will assess Cloud Service Provider offerings
against the DoD Cloud Computing SRG at Impact Levels 4, 5, and 6, supporting the Government's assessment and authorization (A&A) mission under the Risk Management Framework. Five openings — a rare chance to join a full cyber team at stand-up.
How You'll Make an Impact
• Evaluate CSP deliverables and Provisional Authorization documentation for compliance with DoD CSP
SRG IL4/IL5/IL6.
• Analyze A&A packages against contract security requirements and draft compliance assessment
methodologies.
• Coordinate verification of CSP requirements in Government tracking tools (eMASS, ACAS, CMRS, and
related systems).
• Facilitate authorization process syncs, user community round tables, and CSP engagement on
compliance status.
• Research cloud security trends, validate system configurations and logs, and support CSSP and network
defense troubleshooting.
What You'll Need to Join the Team
• Bachelor's degree + 4 years of experience, OR 8 years total in cybersecurity assessment and authorization (RMF, NIST SP 800-53, DoD compliance).
• Active TS/SCI clearance
• Meets DoD 8140 requirements for Work Role 612, Security Control Assessor (Intermediate); alternate
Work Role 722, ISSM.
What Sets You Apart
• Hands-on eMASS package development and workflow management experience.
• Experience assessing CSPs or cloud systems under the DoD Cloud Computing SRG or FedRAMP.
• Working knowledge of STIGs, ACAS/Nessus scanning, and POA&M management.
Certifications (examples of approved options)
DoD 8140 WRC 612 (Intermediate) examples: ISC2 CGRC (formerly CAP), ISACA CISA, CompTIA SecurityX
(formerly CASP+), CISSP.
group id: 90843149