Cybersecurity Risk Analyst (RMF) ***ACTIVE DoD CLEARANCE REQUIRED***

Ampersand Solutions - Huntsville, AL

Full-time - Mid Level

Huntsville, AL

About the position

The Cybersecurity Risk Analyst will provide Risk Management Framework (RMF) and Information System Security Officer (ISSO) support to the US Army Threat Systems Management Office (TSMO) in Huntsville, AL. This mid-level position focuses on identifying system vulnerabilities, implementing security controls, and preparing documentation to support government Authorization to Operate (ATO) activities.

Responsibilities

• Serve as an Information Systems Security Officer (ISSO) and develop RMF packages and strategies.
• Advise on compliance with NIST 800-53 security controls and government policies.
• Develop security artifacts for the Information Assurance program, including System Security Plans (SSP) and Plan of Action and Milestones (POA&M).
• Perform self-assessments of systems and networks using evaluation tools like STIG Viewer and SCAP Compliance Checker.
• Track enterprise reporting and efficiencies through the Enterprise Mission Assurance Support Service (eMASS).
• Monitor security updates for Windows and Linux-based operating systems and VMWare products.
• Conduct reviews of system audits and monitor corrective actions until deficiencies are resolved.

Requirements

• Minimum 3 years experience with Cybersecurity/Risk Management Framework.
• Active SECRET security clearance (TOP SECRET preferred).
• Working knowledge of cybersecurity technology and DoD/Federal cybersecurity policies (e.g., DoD 8500.01, NIST SP 800-53).
• Experience utilizing Enterprise Mission Assurance Support Service (eMASS).
• DoD 8570 Information Assurance Technical Level II Certification (Security+) or higher.
• Ability to travel up to 15%.

Nice-to-haves

• BS degree in relevant field of study.
• Working knowledge of ACAS/NESSUS, SCAP, STIG Viewer/Evaluate STIG tools.
• TOP SECRET / SCI security clearance.
• Experience working with systems under continuous monitoring.