> Markdown version of [/jobs/ext/1469548-security-analyst](https://www.wearedevelopers.com/jobs/ext/1469548-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Analyst - **Company:** Agile Defense - **Location:** Ridgecrest, CA, United States - **Experience:** Experienced - **Salary:** $85,000.0 - $110,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Visio, Computer Networking Systems, Scap Compliance Checker, Vulnerability Analysis - **Published:** July 28, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9062175/security-analyst ## About the Role * Applicant should possess a strong understanding of the RMF process, as well as a working knowledge of eMASS, eMASSter, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio applications. * Excellent written and verbal communication skills, with an ability to clearly report on technical findings to both technical and non-technical stakeholders. * Ability to work independently and manage multiple tasks in a fast-paced environment. * Prior experience supporting Navy-specific systems or enterprise networks. Education and Background B.S. in Technical Field + 4 Years Experience or 6 Years Experience in the planning, implementation, upgrading and/or monitoring of security measures which make up the protection of corporate or government networks. Years of Experience B.S. in Technical Field + 4 Years Experience or 6 Years Experience in the planning, implementation, upgrading and/or monitoring of security measures which make up the protection of corporate or government networks., Experience in the planning, implementation, upgrading and/or monitoring of security measures which make up the protection of corporate or government networks. ## Description * Execute and oversee RMF Documentation and Compliance: Review the accuracy and traceability of all A&A documentation within eMASS to support timely system authorization. * Review documentation to ensure full compliance with cybersecurity policies and standards (DoD, DoW, DoN, and RMF). * Conduct security control assessments and validations of a system's technical and non-technical security features to mitigate known threats and vulnerabilities effectively. These assessments should comprehensively identify and assess impacts while also taking into account existing risk mitigation strategies. * Ensure the completion of all necessary RMF products and reporting in accordance with policy and in collaboration with the Security Control Assessor. * Assist in updating any documentation related to risk assessments (such as Risk Assessment Reports, Plan of Actions & Milestones, etc.) based on the results of assessments. * Conduct the necessary vulnerability analysis to facilitate the mitigation and determination of residual risk as required. * Provide support for the continuous monitoring program as needed, especially when System Level Continuous Monitoring results are essential to meet ongoing authorization requirements. * Assist in contingency planning, testing, and execution as necessary. * Support the incident response process and actively participate in meetings with the program team, offering updates on project status., * Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do. * Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated. * Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support. * Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task. * Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges. * Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success. ## Related Videos - [How to Cause (or Prevent) a Massive Data Breach- Secure Coding and IDOR](https://www.wearedevelopers.com/videos/39-how-to-cause-or-prevent-a-massive-data-breach-secure-coding-and-idor) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm) - [Lessons learned from observing a billion API requests](https://www.wearedevelopers.com/videos/1574-lessons-learned-from-observing-a-billion-api-requests) - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) ## Related Articles - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)