RMF Analyst - Norfolk - ANALYGENCE Inc

    ANALYGENCE Inc
    ANALYGENCE Inc Norfolk

    1 day ago

    Description


    Tharros has an immediate opportunity to support the US Navy with operational test and evaluation support. The RMF Analyst will conduct comprehensive evaluations of management, operational, and technical security controls, both implemented and inherited, to determine overall control effectiveness and compliance. The Security Architect also provides project management, subject-matter expertise, and hands-on technical support for all aspects of OPTEVFOR Cyber Operational Test & Evaluation (OT&E) infrastructure, tools, and certification/accreditation activities in alignment with DoD and Department of the Navy (DON) cybersecurity policies and guidance.
    • Create, review, update, and validate cybersecurity Standard Operating Procedures (SOPs) as required.
    • Review and maintain an inventory of authorized software (as the software custodian).
    • Review and maintain an inventory of government-furnished devices and media.
    • Ensure configurations on laptops and servers are validated before being deployed (as required)
    • Audit and validate configurations of network devices based on STIGs, or define and implement compensating controls of such STIGs as required to ensure mission execution.
    • Maintain and update all RMF and A&A documentation to ensure relevance and alignment with OPTEVFOR cyber OT&E mission assets, including required revisions and updates in eMASS.
    • Conduct comprehensive annual RMF package reviews to ensure continued compliance of the cyber OT&E mission toolset, networks, and/or systems.
    • Ensure traceability is maintained throughout the RMF submission process (e.g., A&A plan, Plan Of Action and Milestones (POA&M), Security Assessment Report (SAR), topology, software, ports, protocols and services, test plan).
    • Maintain network and system documentation in DoD Information Technology Portfolio Repository-DON / DADMS.
    • Maintain documentation and registration of network ports, protocols, and services.
    • Maintain circuit registrations in the Global Interconnection Approval Process System (GIAP) and Systems/Network Approval Process (SNAP).
    • Maintain and report on the status (weekly) of all outstanding A&A items and supporting documentation.
    • As a member of the Configuration Control Board (CCB), ensure CCB-approved changes are timely and accurately reflected in the A&A documentation.
    • Support compliance validation of current and future directives (e.g., IAVs, STIGs, TASKORD/CTOs).
    • Provide recommendations for corrective action of any non-compliant security controls.
    • Execute DISA STIG validations for systems in conjunction with RMF/A&A package reviews annually in accordance with eh DoD Instruction 8510 series, Risk Management Framework for DoD systems.
    • Provide security expertise to ensure security controls are implemented and the resulting documentation and artifacts are current.
    • Prepare reports on scanning results and configuration management observations monthly.
    • Document assessment activities and results in sufficient detail to enable external review of all assessment processes, activities, results, and conclusions.
    • Conduct and document a semi-annual tabletop exercise twice in a calendar year.
    • Produce test plans, draft after actions, and other documents for review and comment.
    • Review and/or revise Business Impact Analysis (BIA) to include business process, IT dependency, and physical security assessments annually.
    • Review and analyze IT contingency/disaster recovery plans for NIST and DoN compliance, and produce checklists for IT systems.
    • Assist with exercise and/or training and documentation of IT contingency plan and execution. Able to work alone or in a small group to resolve tasks independently with minimal supervision.
    Requirements
    • Minimum 5 years' experience designing enterprise and systems security throughout the development lifecycle.
    • Minimum 3 years' experience conducting thorough assessments of management, operational, and technical security controls within IT systems
    • Minimum 3 years' experience providing project management, subject matter expertise, and hands-on experience for systems certification and accreditation efforts in accordance with applicable DOD and DON policies and guidance.
    • Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.
    • Excellent written and verbal communication skills.
  • Work in company

    Senior A&A Support Lead

    Only for registered members

    Senior A&A Support Lead TQI Solutions is looking for proactive, collaborative leaders who want to do meaningful work while maintaining a healthy work-life balance. We offer excellent benefits, opportunities for growth, and the chance to support important maritime and cybersecurit ...

    Norfolk

    6 days ago

  • Work in company

    ISSE with DoD Top Secret Clearance Norfolk, VA

    Only for registered members

    We are seeking an Information Systems Security Engineer with DoD Top Secret Clearance to join our team in Norfolk, VA. · ...

    Norfolk $110,000 - $120,000 (USD)

    1 month ago

  • Work in company

    Navy Qualified Validator

    Only for registered members

    · Location: Norfolk, VA · Position Type: Full-Time · Clearance: Eligibility for TS/SCI required · AERMOR is seeking an experienced Navy Qualified Validator (NQV) who will conduct independent, comprehensive assessments of management, operational, and technical security controls t ...

    Norfolk, VA $70,000 - $120,000 (USD) per year

    4 days ago

  • Work in company

    Risk Management Framework

    Only for registered members

    · The RMF Analyst supports OPTEVFOR Cyber Operational Test & Evaluation (OT&E) missions by applying enterprise- and system-level security architecture expertise across the system development lifecycle. The role ensures alignment with evolving laws, regulations, and DoD and Depar ...

    Norfolk, VA

    1 month ago

  • Work in company

    Risk Management Framework

    Only for registered members

    We are seeking a Risk Management Framework Analyst to support a U.S. Navy cyber Operational Test and Evaluation mission across platforms, systems, and test infrastructure. · Manage RMF and A&A activities including eMASS updates annual package reviews POA&Ms SARs authorization art ...

    Norfolk, VA

    3 weeks ago

  • Work in company

    OPTEVFOR - Senior Navy Qualified Validator (RMF- SCA)

    Only for registered members

    Rigid Tactical seeks a Senior Navy Qualified Validator (NQV) / RMF Security Control Assessor (SCA) to join its mission-focused team as Key Personnel on critical defense contracts. · The successful candidate will apply advanced Risk Management Framework expertise to conduct compre ...

    Norfolk

    1 month ago

  • Work in company

    Risk Management Framework

    Only for registered members

    This role applies enterprise and system-level cybersecurity expertise across the system development lifecycle to ensure compliance with Department of Defense and Department of the Navy cybersecurity policies. · The analyst translates complex operational, technical, and environmen ...

    Norfolk

    3 weeks ago

  • Work in company

    Senior A&A Support Lead

    Only for registered members

    · Leading with our people, Digital Consultants' mission is to deliver the highest level of professional solutions while being a trusted partner and advisor to our customers. With a culture of practicality, opportunity, and creativity we remain dedicated to being honest, trustwor ...

    Norfolk, VA

    4 days ago

  • Work in company

    Information Security Analyst

    Only for registered members

    DecisionPoint Corporation is seeking an Information Security Analyst (Navy Qualified Validator) to support the Norfolk Naval Shipyard (NNSY) IT Support Services contract. NNSY's mission is to safely return warships to the Fleet on time and within budget, supported by secure and r ...

    Norfolk

    1 month ago

  • Work in company

    Information Security Analyst

    Only for registered members

    DecisionPoint Corporation is seeking an Information Security Analyst to support the Norfolk Naval Shipyard (NNSY) IT Support Services contract. · ...

    Norfolk, VA

    1 month ago

  • Work in company

    Cybersecurity Systems Administrator IV

    Only for registered members

    Join a team that's shaping the future of Navy support. ICI Services—a 100% employee-owned company proudly celebrating 26 years of excellence—is seeking Cybersecurity Systems Administrator IV to support Surface Combat Systems Training Command (SCSTC) -NSWC Dahlgren Division Team i ...

    Norfolk Full time

    1 week ago

  • Work in company

    Cybersecurity Systems Administrator IV

    Only for registered members

    The Cybersecurity Systems Administrator IV will support Surface Combat Systems Training Command (SCSTC) -NSWC Dahlgren Division Team in San Diego, CA. The ideal candidate has hands-on experience supporting Navy training environments, combat systems labs, or RDT&E networks. · Prov ...

    Norfolk

    2 weeks ago

  • Work in company

    Cybersecurity Systems Administrator III

    Only for registered members

    Cybersecurity Systems Administrator III - Position DescriptionJoin a team that's shaping the future of Navy support.The Cybersecurity Systems Administrator provides enterprise system, network, and cybersecurity support to the Surface Combat Systems Training Command (SCSTC) and Na ...

    Norfolk

    2 weeks ago

  • Work in company

    Cybersecurity Technician

    Only for registered members

    Description · PWS Title: Cybersecurity Technician · Location: Hampton Roads, VA · Clearance Type: Top Secret · ***Contingent upon award*** · Responsibilities include (but are not limited to): · Implement and enforce DISA Security Technical Implementation Guides (STIGs) across enc ...

    Ingersoll Street, Suite Norfolk, Virginia, United States $50,000 - $90,000 (USD) per year

    1 week ago

  • Work in company

    Data Security Analyst, Senior

    Only for registered members

    Trimitron Corp is seeking a highly experienced Senior Data Security Analyst to lead data protection and cybersecurity analysis activities in support of the Naval Information Warfare Center (NIWC) Pacific's Positioning, Navigation and Timing (PNT) Division. · Oversee the developme ...

    Norfolk, VA

    1 month ago

  • Work in company

    Data Security Analyst, Junior

    Only for registered members

    We are seeking a motivated Data Security Analyst to support the Naval Information Warfare Center (NIWC) Pacific's Positioning, Navigation, and Timing (PNT) Division in Norfolk. · ...

    Norfolk Full time

    2 months ago

  • Work in company

    Data Security Analyst, Intermediate

    Only for registered members

    Trimitron Corp is seeking an experienced Data Security Analyst (Intermediate) to provide cybersecurity support. · ...

    Norfolk Full time

    2 months ago

  • Work in company

    Data Security Analyst, Senior

    Only for registered members

    We are seeking a highly experienced Data Security Analyst, Senior to lead data protection, cybersecurity analysis and information assurance activities in support of the Naval Information Warfare Center (NIWC) Pacific’s Positioning, Navigation and Timing (PNT) Division. · Oversee ...

    Norfolk Full time

    2 months ago

  • Work in company

    Fleet Requirements Analyst

    Only for registered members

    MANTENimiento busca un analista de requisitos flota motivado para unirse a nuestro equipo en Norfolk, VA. Este es un puesto onsite. · Juntarse al programa de Entorno Continuo de Capacitación (NCTE) del Ejército y contribuir a la evolución de la preparación para los combatientes. ...

    Norfolk

    1 month ago

  • Work in company

    Cybersecurity Technician

    Only for registered members

    Implement and enforce DISA Security Technical Implementation Guides (STIGs) across enclave systems. Ensure devices are properly hardened and configurations meet current Information Assurance (IA) standards. · ...

    Norfolk

    1 month ago

  • Work in company

    Computer Systems Analyst I

    Only for registered members

    Predicate Logic is looking for a motivated Computer Systems Analyst I to join their team in Norfolk,Va. · Analyze,test,maintain,and monitor computer programs and systems · Assess the usefulness of pre-developed application packages · ...

    Norfolk

    1 month ago

Jobs
>
Norfolk