Systems Security Analyst Levels Contingent

Systems Security Analyst

This Position Description establishes the technical requirements, core duties, governance parameters, and qualification standards for the Systems Security Analyst supporting the customer.

• Capability Area: Cybersecurity Operations - RMF & Compliance
• DCWF Work Role Code: 651 - Systems Security Analyst
• Minimum Proficiency Level: Intermediate
• Key Personnel Designation: No
• Service Classification: Phase I Pre-Convergence Service

• Risk Management Framework (RMF) Administration: Develops, updates, and maintains complete RMF artifact packages ( within the Enterprise Mission Assurance Support Service (eMASS) to achieve and sustain Authorizations to Operate (ATOs) across all in-scope systems, applications, and network enclaves.
• Vulnerability Scanning & Technical Compliance: Conducts automated and manual vulnerability assessments using Assured Compliance Assessment Solution (ACAS / Tenable Security Center) and delivers monthly STIG/SCAP Compliance Reports.
• Remediation & Quarantine Management: Formulates weekly Vulnerability Index (VI) reports alongside Plans of Action & Milestones (POA&Ms) via CDRL A020, and tracks non-compliant devices subject to network isolation via Weekly Quarantine Reports.
• Security Program & Governance Enforcement: Maintains eMASS system documentation and ensures strict operational alignment with DD Form 254 guidelines, AR 380-5, and DoDI 5200.48 Controlled Unclassified Information (CUI) policies.

• Degree: Associate’s or Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, or a related technical field.
• Experience: Minimum of 4 years of hands‑on experience developing RMF documentation, executing IA assessments, managing eMASS workflows, and operating ACAS vulnerability scanning suites.

All contractor personnel performing cyberspace functions under this contract must comply with DoDM 8140.03 standards for DCWF Work Role 651 prior to commencing billable work:

• Foundational & Residential
  
  Qualification:
  
  Must hold active residential qualification credentials and foundational DCWF certifications appropriate for the Intermediate proficiency level.
• Qualifying
  
  Certifications:
  
  
  • Security+ CE, SSCP, CCNA Security.
  • CySA+, CCNP Security, CISA, CGRC.
  • CISSP, CISM, Security
    
    X.

• Clearance Level: Active Secret clearance required prior to contract start;
  Top Secret/SCI eligible.
• System Vetting: Must complete full vetting through DISS and MP ICAM prior to issuance of Common Access Card (CAC) and elevated system access privileges.

Position & Compensation Disclaimer (Pay Transparency Mandates):

Employment for this role is conditional upon contract award, executed funding, and client approval. Advertised ranges do not constitute a binding promise of specific salary. In compliance with applicable federal, state, and municipal pay transparency requirements—including but not limited to pay disclosure rules in California, Colorado, New York, and Washington—posted salary bands remain flexible. Compensation ranges may be modified prior to an offer to reflect candidate expertise, client budget constraints, and localized geographic pay scales tied to the assigned work site or state of residence.