> Markdown version of [/jobs/ext/3079945-rmf-cybersecurity-analyst](https://www.wearedevelopers.com/jobs/ext/3079945-rmf-cybersecurity-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # RMF Cybersecurity Analyst - **Company:** Caci Inc - **Location:** Wharton, NJ, United States - **Experience:** Expert - **Salary:** $86,600.0 - $181,800.0 - **Contract:** Permanent contract - **Skills:** Microsoft Word, Microsoft Excel, CompTIA Security+, Cyber Security, Microsoft PowerPoint, Verification and Validation (Software), Software Vulnerability Management, SARS Software Products, Information Technology, Cisco, Plan of Action and Milestones, Vulnerability Analysis - **Published:** September 25, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9190503/rmf-cybersecurity-analyst ## About the Role Required: * U.S. Citizenship. * Active Secret Security Clearance, or the ability to obtain one. * Bachelor's degree in Cybersecurity, Information Technology, Computer Sciences or a related field, or minimum 5 years of closely related experience working with Navy or DoD weapon systems, equipment, or programs. * Experience working with the NIST Risk Management Framework (RMF). * Understanding of cybersecurity principles, security controls, vulnerability management, and risk management concepts. * Experience supporting cybersecurity compliance, security authorization, risk management, or information security programs. * Experience in maintaining all documentation in the DoD Enterprise Mission Assurance Support Service (eMASS). * Subject matter expertise with NIST SP 800-53 security controls and cybersecurity compliance requirements. * Experience supporting the development, maintenance, or review of authorization package documentation, including SSPs, SARs, POA&Ms, and Risk Assessments. * Understanding of the Authorization to Operate (ATO) process and continuous monitoring requirements. * Experience tracking and managing POA&M findings through remediation and closure. * Ability to review technical security information and translate findings into compliance documentation and actionable recommendations. * Strong organizational skills with the ability to manage multiple systems, priorities, and compliance activities simultaneously. * Strong written and verbal communication skills, including the ability to develop and review formal security documentation. * Proficiency with MS Office applications, Excel, Word, and PowerPoint. Desired : * Demonstrated experience providing cyber security support for complex military systems, preferably U.S. Navy Gun Weapon Systems. * Relative Certifications such as COMPTIA Security +, CISCO Certified Network Associate (CCNA). ## Description * Manage the security authorization lifecycle for one or more information systems in accordance with Federal Risk Management Framework (RMF) requirements. * Coordinate activities required to obtain and maintain program office Authorization to Operate (ATO) approvals. * Assess and track implementation of NIST SP 800-53 security controls and associated compliance requirements. * Input and maintain all documentation in Enterprise Mission Assurance Support Service (eMASS) Develop, review, update, and maintain authorization package documentation, including: o System Security Plans (SSPs) o Security Assessment Plans (SAPs) o Security Assessment Reports (SARs) o Plan of Action and Milestones (POA&Ms) o Risk Assessments o Continuous Monitoring documentation o Security-related policies and procedures o Security Technical Implementation Guides (STIGs) o Assured Compliance Assessment Solution (ACAS) o IV&V (Independent, Verification and Validation) * Manage POA&M activities by tracking findings, monitoring remediation progress, validating corrective actions, and supporting closure efforts. * Provide technical guidance and compliance recommendations to system owners, engineers, administrators, and security stakeholders to facilitate POA&M remediation and closure. * Coordinate with technical teams to gather evidence supporting security control implementation and compliance requirements. * Review vulnerability scan results, assessment findings, and security documentation to identify compliance gaps and areas requiring remediation. * Support continuous monitoring activities by tracking security posture, compliance status, and ongoing control effectiveness. * Participate in security assessments, audits, and compliance reviews conducted by internal and external stakeholders. * Assist in the development of risk mitigation strategies and recommendations for addressing identified security weaknesses. * Track authorization milestones, compliance deadlines, and remediation activities to ensure timely completion. * Communicate compliance status, risks, findings, and recommendations to both technical and non-technical stakeholders. * Support audits and reporting activities related to cybersecurity requirements and organizational security programs. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Developing the Rich Text Editor for DeepL.com](https://www.wearedevelopers.com/videos/1172-developing-the-rich-text-editor-for-deepl-com) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)