RMF Cybersecurity Analyst

Job Title:

RMF Cybersecurity Analyst Job Category:
Information Technology Time Type:
Full time Minimum Clearance Required to Start:
Secret Employee Type:
Regular Percentage of

Travel Required:

Up to 10%
Type of Travel:
Continental US*
*
* The Opportunity:

CACI is seeking a RMF Cybersecurity Analyst to play a critical role in ensuring the cybersecurity of multiple U.S. Navy gun weapon systems in support of the Naval Surface Warfare Center detachment at Picatinny Arsenal, New Jersey . This position involves implementing and maintaining Risk Management Framework (RMF) processes across various weapon systems to protect against cyber threats.

Key responsibilities include:

conducting security assessments, developing security plans, and ensuring compliance with U.S. Navy cybersecurity policies. The analyst will work closely with system engineers, program managers, and cybersecurity teams to identify and mitigate risks, perform vulnerability assessments, and recommend security enhancements.

Responsibilities:
• Manage the security authorization lifecycle for one or more information systems in accordance with Federal Risk Management Framework (RMF) requirements.
• Coordinate activities required to obtain and maintain program office Authorization to Operate (ATO) approvals.
• Assess and track implementation of NIST SP 800-53 security controls and associated compliance requirements.
• Input and maintain all documentation in Enterprise Mission Assurance Support Service (eMASS)
Develop, review, update, and maintain authorization package documentation, including:o System Security Plans (SSPs) o Security Assessment Plans (SAPs) o Security Assessment Reports (SARs) o Plan of Action and Milestones (POA&Ms) o Risk Assessment so Continuous Monitoring documentationo Security-related policies and procedure so Security Technical Implementation Guides (STIGs) o Assured Compliance Assessment Solution (ACAS) o IV&V (Independent, Verification and Validation)
• Manage POA&M activities by tracking findings, monitoring remediation progress, validating corrective actions, and supporting closure efforts.
• Provide technical guidance and compliance recommendations to system owners, engineers, administrators, and security stakeholders to facilitate POA&M remediation and closure.
• Coordinate with technical teams to gather evidence supporting security control implementation and compliance requirements.
• Review vulnerability scan results, assessment findings, and security documentation to identify compliance gaps and areas requiring remediation.
• Support continuous monitoring activities by tracking security posture, compliance status, and ongoing control effectiveness.
• Participate in security assessments, audits, and compliance reviews conducted by internal and external stakeholders.
• Assist in the development of risk mitigation strategies and recommendations for addressing identified security weaknesses.
• Track authorization milestones, compliance deadlines, and remediation activities to ensure timely completion.
• Communicate compliance status, risks, findings, and recommendations to both technical and non-technical stakeholders.
• Support audits and reporting activities related to cybersecurity requirements and organizational security programs.

Qualifications:

Required:

• U.S. Citizenship.
• Active Secret Security Clearance, or the ability to obtain one.
• Bachelor’s degree in Cybersecurity, Information Technology, Computer Sciences or a related field, or minimum 5 years of closely related experience working with Navy or DoD weapon systems, equipment, or programs.
• Experience working with the NIST Risk Management Framework (RMF).
• Understanding of cybersecurity principles, security controls, vulnerability management, and risk management…