Cybersecurity RMF Analyst / ISSE - TS/SCIDepartment: Government Customer- Chantilly
Location: Chantilly, VA
ACTIVE TS/SCI CLEARANCE REQUIRED TO BE CONSIDERED FOR THIS POSITIONAbout the RoleWe are seeking a motivated cybersecurity professional to support Risk Management Framework (RMF) activities and security accreditation for Department of Defense (DoD) systems.
This is a hands-on opportunity to work with security controls, system hardening, compliance documentation, vulnerability remediation, and continuous monitoring across Linux and Windows environments.
Candidates with a cybersecurity foundation, a willingness to learn, and an interest in supporting mission-critical systems are encouraged to apply. Opportunities to develop technical skills and expand knowledge of DoD security processes are available.
What You'll Do- Support RMF activities throughout the system authorization lifecycle.
- Assist with developing and maintaining security documentation, including SSPs, SARs, and POA&Ms.
- Help apply and validate security configurations and DISA STIG requirements across Linux and Windows systems.
- Use command-line tools to review configurations, collect evidence, and support security assessments.
- Assist with vulnerability tracking, remediation, and continuous monitoring.
- Work with engineering and operations teams to identify and address security risks.
- Support compliance reviews, audits, and authorization activities.
- Learn and apply DoD cybersecurity policies, standards, and best practices.
What We're Looking For- An active TS/SCI clearance.
- An interest in cybersecurity, information assurance, or systems security engineering.
- Foundational knowledge of Windows, Linux, or general IT systems.
- A willingness to learn DoD RMF processes, NIST security controls, and DISA STIG requirements.
- Strong problem-solving skills, attention to detail, and a collaborative mindset.
- Relevant cybersecurity education, certifications, or hands-on experience are beneficial.
Nice to Have- CompTIA Security+, CISSP, or another relevant cybersecurity certification.
- Familiarity with RMF, NIST SP 800-53, eMASS, or security authorization documentation.
- Experience with Linux or Windows command-line tools.
- Exposure to vulnerability assessment tools such as ACAS/Nessus.
- Knowledge of AWS, GovCloud, the DoD Cloud Computing SRG, or FedRAMP.
- Basic scripting knowledge in Bash, PowerShell, or Python.
