RMF Analyst IV

RMF Analyst IV – Huntsville, AL

Req : 38763

Huntsville, AL

Chenega Military, Intelligence & Operations Support (MIOS) in Huntsville, AL seeks an experienced RMF Analyst IV to provide oversight and resources needed to execute the contract requirements for the Army Materiel Command (AMC) Chief Information Office (CIO). Your role will include senior‑level RMF analysis, artifact generation, and control validation for a wide range of cybersecurity tasks.

Chronos Operations, LLC is a wholly‑owned subsidiary of Chenega Corporation. Operating out of Colorado Springs, CO, the company supports mission‑critical services in Advanced Analytics & AI, Software Engineering, Cybersecurity, Information Technology, and Intelligence for the Army Materiel Command and CIO. The RMF Analyst IV will lead RMF stakeholder coordination, ensure compliance with RMF and Continuous Monitoring requirements, and oversee the cybersecurity lifecycle from inception to completion.

• Senior RMF practitioner managing ATO packages, continuous monitoring plans, and eMASS documentation.
• Leads RMF stakeholder coordination with AO/AODR and security teams.
• Deep understanding of cybersecurity frameworks, documentation, and technical validation processes, working closely with stakeholders and control assessors to ensure security and compliance.
• Track timely and high‑quality completion of process tasks and milestones, and report on the status of key milestones to performers and senior stakeholders.
• Oversee the cybersecurity lifecycle from inception to completion.
• Develop, review, and update documentation to ensure compliance with RMF and Continuous Monitoring requirements.
• Evaluate and validate technical processes related to ATO (Authority to Operate) requirements, ensuring alignment with cybersecurity standards.
• Provide direct support to Control Assessors, assisting in the preparation and review of authorization information and documentation for RMF and Continuous Monitoring.
• Assist with eMASS package completion and maintenance, including artifacts, self‑assessments, and asset management.
• Review project schedules, requirements, and risk assessments, offering recommendations to program stakeholders to enhance security posture.
• Develop security plans, assessment reports, plans of action, and milestones for remediation. Define criticality or sensitivity of systems, perform categorization calculations, and recommend corrective action.
• Recommend baseline security controls, assess changes in controls, and coordinate changes to security authorizations.
• Conduct evaluations to verify that design and implementation meet requirements.
• Prepare test plans and conduct security control testing in accordance with NIST SP800‑53.
• Other duties as assigned.

• Bachelor's degree in Science, Technology, Engineering, Mathematics, IT, or business‑related programs.
• 8+ years of experience in Cybersecurity compliance/Risk Management Framework.
• 8+ years of experience with RMF (NIST 800‑53), ATO packages, POA&M development, and system categorization.
• 3+ years’ experience supporting DoD or federal programs is highly desirable.
• Cybersecurity certifications such as CISSP, CISA, CISM, or CGRC are required.
• Must have an active Secret clearance with the ability to obtain TS with SCI eligibility.

• Experience with eMASS and/or Xacta is required (preferably eMASS).
• Experience with cloud platforms like Amazon Web Services (AWS), Microsoft Azure, etc., and migrating customers/projects to the cloud.
• Experience working in a Unix/Linux environment.
• Experience working in cloud infrastructures.
• Must have high proficiency in the Microsoft Office suite and possess advanced skills and knowledge in Word, Excel, PowerPoint, and Outlook.
• Must have an understanding of cloud technologies (AWS, Azure, Google Cloud Platform, Oracle) and hybrid cloud environments.
• Experience extracting, transforming, and structuring data to support both exploratory analytics and operational reporting.
• Strong creative and visual storytelling skills with an eye for design, usability, and user experience.
• Use expert knowledge of data visualization tools to deliver information that…