> Markdown version of [/jobs/ext/685639-information-security-analyst-rmf](https://www.wearedevelopers.com/jobs/ext/685639-information-security-analyst-rmf). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information Security Analyst (RMF)

- **Company:** Craig Technical Consulting, Inc.
- **Location:** Saint Inigoes, MD, United States
- **Salary:** $100,000.0 - $125,000.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Systems, Microsoft Visio, Subsystems, Information Technology, Scap Compliance Checker
- **Published:** June 28, 2026
- **Apply:** https://www.juju.com/job/00000000gbkjgt

## About the Role

+ A Bachelor's degree in Information Technology, Cybersecurity, Data Science, Information Systems, Computer Science, or a related field, is required. Or a minimum of four (4) years experience and a CASP+ certificate in substitute of degree.

 + Experience supporting Army RMF packages.

 + Experience with DSS RMF process, DISA ACAS, and DoD IA compliance standards.

 + Security + CE/DoD 8570.01 IAT-III compliance and knowledge of Navy IT/IA policies and procedures is required.

 + Occasional travel maybe required.

 + Security Clearance: An active DoD Secret clearance is required to start.

 + Applicant selected may be subject to a security investigation and must meet eligibility requirements for access to classified information.

Knowledge and Skills:

 + Risk Management Framework (RMF) processes.

 + Cybersecurity/A&A tools (i.e., eMASS, eMASSter, STIG Viewer, SCAP Compliance Checker (SCC), VRAM, and Visio).

 + IT systems and subsystems.

 + Project management.

 + Written and verbal communications.

 + Teamwork and collaboration.

 + The applicant must be familiar with working on classified systems (i.e., SIPRNet) within secure environments.

The salary range for this role is $100,000 - $125,000; however, Craig Technologies considers several factors when extending an offer for employment, including but not limited to, the role and associated responsibilities, a candidate's work experience, education/training and preferred skills and knowledge.

Note: This job description describes the general nature of the duties and requirements of the job. It is not intended to be an exhaustive list or to limit the supervisor's ability to modify work assignments as appropriate.

## Description

Summary: Craig Technologies has an opening for an Information Security Analyst with Risk Management Framework (RMF) experience at Webster Outlying Field, St. Inigoes, MD. This candidate will provide Cybersecurity analysis, engineering, and certification and accreditation (C&A)/Assessment and Authorization (A&A) support in accordance with National Institute of Standards and Technology (NIST), RMF, and/or Platform Information Technology (PIT) methodologies.

Detailed Description:

 + Plan, implement, upgrade and monitor security measures for the protection of complex DoD communication systems and networks.

 + Assess IA posture of DoD communications systems and networks in support of system certification and accreditation.

 + Maintain and support current and ongoing C&A packages.

 + Develop and maintain system IA documentation to support certification of compliance to applicable standards including


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [10M Data Records Lost, Underwater Computing, and Psychedelic Fish - Matthias Geniar](https://www.wearedevelopers.com/videos/1908-10m-data-records-lost-underwater-computing-and-psychedelic-fish-matthias-geniar)
- [Reporting Active Exploits in 24 Hours: Are You Ready for the CRA?](https://www.wearedevelopers.com/videos/100248-reporting-active-exploits-in-24-hours-are-you-ready-for-the-cra)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)

## Related Articles

- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Data Analyst Salary in Switzerland](https://www.wearedevelopers.com/magazine/276-data-analyst-salary-in-switzerland)