Senior Cybersecurity Systems Analyst (A&A, RMF)

About the role

Amentum is seeking a Senior Cybersecurity Systems Analyst to work on site at Homestead Reserve Airbase, Miami. The role provides Assessment and Authorization (A&A) support within the Risk Management Framework (RMF) for the defense-in-depth program of networks, systems, services and devices at US Special Operations Command South (USSOCOM). It follows the DoD RMF and Intelligence Community Directive (ICD) 503, and covers Connection Approval Packages (CAPs) for the Defense Information Systems Network (DISN) and DIA approval authorities.

Key responsibilities

• Perform risk assessments of information systems and create A&A packages, ensuring systems meet confidentiality, integrity and availability requirements under national, DoD, DIA and NSA regulations.
• Assess network compliance against NIST 800-53 controls and develop Plans of Action and Milestones (POA&Ms) to resolve deficiencies.
• Use ACAS, Nessus and SCAP to run security evaluations and vulnerability assessments, and identify applicable STIGs.
• Track A&A status of systems, maintain CAPs for DISN, cloud and DIA connections, and liaise with administrators and the Site Integration Facility to fix issues.
• Scan new systems and applications, draft certification letters, and help obtain ATO, IATT or ATC.
• Develop and maintain an Information Security Continuous Monitoring (ISCM) plan, track compliance, and give early notice before accreditation lapses.
• Support COA development, implement mitigation processes, validate patches, and report cybersecurity posture to the authorizing official and higher headquarters.

Required profile

• 8+ years of experience.
• Bachelor's degree.
• Current DoD 8570.01-M certification at IAT Level III or IAM Level III (examples: CISSP, CASP+, CISA, CISM, CCISO, GCIH, CCSP).
• Ability to lift up to 20 pounds and work in close quarters, indoors or outdoors.

Required skills

• Risk Management Framework (RMF) and ICD 503
• NIST 800-53 and STIGs
• ACAS, Nessus and SCAP
• SIEM and endpoint security tools