Cybersecurity Analyst (NIST RMF A&A)

About the role

Amentum is seeking a Cybersecurity Analyst to support its McLean, VA customer. The analyst performs assessment and authorization (A&A) efforts under the NIST Risk Management Framework (RMF) on behalf of a federal civilian agency, reviewing and validating cybersecurity documentation and technical controls. The role works within a team conducting A&A activities.

Key responsibilities

• Develop System Security Plans, contingency plans, business impact analyses, POA&Ms, SARs, SAPs and other RMF documentation
• Identify risks, validate mitigation plans, analyze system designs and assist with A&A issues that block authorization
• Create and review A&A Body of Evidence, and develop and run Security Test Plans
• Maintain Continuous Monitoring (CONMON) to keep systems authorized
• Review vulnerabilities, architecture and defense-in-depth strategies, and report findings in POA&Ms
• Estimate Level of Effort, attend A&A status meetings and advise program offices on mitigation strategies
• Keep cybersecurity policies and processes up to date and communicate the security posture through designated reporting

Required profile

• 5+ years of experience in cybersecurity policy, procedures and processes, including RMF, NIST 800-53 and A&A
• Experience building A&A documentation from scratch and performing RMF steps 1 through 4
• Familiarity with NIST publications, RMF and NIST controls
• Top-Secret clearance with polygraph
• English reading, speaking, writing and understanding
• Preferred: BA/BS degree, Security+, CAP, CISSP, CISM, GSEC, GCIH or GSLC, and hands-on experience with Xacta and Greenlight/Roadrunner

Required skills

• NIST RMF and NIST 800-53
• Defense-in-depth and information assurance principles
• Multi-tasking, critical thinking and accuracy under pressure

What we offer

• Salary range of $160,000 - $180,000
• Health, dental and vision insurance, paid time off and holidays
• Retirement benefits including 401(k) matching, parental leave and educational reimbursement
• Employee stock purchase plan, disability and life insurance, pet insurance