Cybersecurity Analyst RMF / A&A (Cleared)

Join the team that authorizes the DoD’s commercial cloud. You will assess Cloud Service Provider offerings against the DoD Cloud Computing SRG at Impact Levels 4, 5, and 6, supporting DISA’s assessment and authorization (A&A) mission under the Risk Management Framework. Five openings - a rare chance to join a full cyber team at stand-up.

Locations Arlington, VA (Crystal City); Fort Meade, MD; Chambersburg, PA (Letterkenny Army Depot); Ogden, UT (Hill AFB); or Oklahoma City, OK (Tinker AFB). On-site at a Government facility; limited local telework of unclassified work with Government approval

How You’ll Make an Impact

• Evaluate CSP deliverables and Provisional Authorization documentation for compliance with DoD CSP SRG IL4/IL5/IL6.
• Analyze A&A packages against contract security requirements and draft compliance assessment methodologies.
• Coordinate verification of CSP requirements in Government tracking tools (eMASS, ACAS, CMRS, and related systems).
• Facilitate authorization process syncs, user community round tables, and CSP engagement on compliance status.
• Research cloud security trends, validate system configurations and logs, and support CSSP and network defense troubleshooting.

• Bachelor’s degree 4 years of experience, OR 8 years total in cybersecurity assessment and authorization (RMF, NIST SP 800-53, DoD compliance).
• Active TS/SCI clearance.
• Meets DoD 8140 requirements for Work Role 612, Security Control Assessor (Intermediate); alternate Work Role 722, ISSM.

What Sets You Apart

• Hands-on eMASS package development and workflow management experience.
• Experience assessing CSPs or cloud systems under the DoD Cloud Computing SRG or FedRAMP.
• Working knowledge of STIGs, ACAS/Nessus scanning, and POA&M management.

Certifications (examples of approved options) DoD 8140 WRC 612 (Intermediate) examples: ISC2 CGRC (formerly CAP), ISACA CISA, CompTIA SecurityX (formerly CASP ), CISSP.