Cybersecurity Analyst / RMF (ISSO)
An on-site ISSO/cybersecurity analyst supporting Army ATEC systems at Fort Hood, TX (and White Sands Missile Range, NM), keeping continuous Authority to Operate through RMF and eMASS, running ACAS/SCAP scans, remediating vulnerabilities, and doing security operations and incident response. Secret clearance minimum is required.
- Compensation
- Not disclosed
- Location
- Fort Hood, TX 76544
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- Not specified
- Category
- Security
- Posted
Skills
Must have
- Secret clearance minimum (Tier 3 / T3R)
- Top Secret / SCI eligibility (Tier 5 / T5R) to administer classified systems or networks or for critical-/special-sensitive duties
- Execute RMF tasks to achieve and maintain continuous ATO without lapse for designated ATEC systems
- Create and maintain policies, procedures, diagrams, hardware/software listings, and all ATO package artifacts
- Manage eMASS packages, POA&Ms, and control assessments; submit renewal packages no less than six months before expiration
- Perform security operations with 15-minute critical and 1-hour high incident response
- Remediate Critical/High vulnerabilities within 30 days
- Run ACAS and SCAP scans
- Manage endpoint security and network access control and support the DoD Cybersecurity Hygiene Scorecard
- Perform application security static and dynamic code analysis and threat modeling
Full description
Position Title: Cybersecurity Analyst / RMF (ISSO)
Location: Aberdeen Fort Hood, TX; White Sands Missile Range, NM
Clearance required: Secret minimum (Tier 3 / T3R); Top Secret / SCI eligible (Tier 5 / T5R) required to administer classified systems or networks or for critical- or special-sensitive duties.
Scope of Work: Executes the enterprise cybersecurity program, maintaining continuous Authority to Operate for multiple ATEC systems through the Risk Management Framework and eMASS, and performing security operations and vulnerability management.
Responsibilities include (but are not limited to):
- Execute RMF tasks to achieve and maintain continuous ATO without lapse for designated ATEC systems
- Create and maintain policies, procedures, diagrams, hardware and software listings, and all ATO package artifacts
- Manage eMASS packages, POA&Ms, and control assessments and submit renewal packages no less than six months before expiration
- Perform security operations with 15-minute critical and 1-hour high incident response, remediating Critical/High vulnerabilities within 30 days
- Run ACAS and SCAP scans, manage endpoint security and network access control, and support the DoD Cybersecurity Hygiene Scorecard
- Perform application security static and dynamic code analysis and threat modeling