[Remote] Cybersecurity RMF Analyst

Note: The job is a remote job and is open to candidates in USA. KBR is a trusted partner delivering complex technical solutions and expert support to the U.S. Department of War. They are seeking a Senior Cybersecurity RMF Analyst to assess and document cloud-based security for mission-critical systems, leveraging expertise in RMF and compliance frameworks.

Responsibilities

• Assess cybersecurity standards and practices of cloud-based systems against FedRAMP, DoW, and DHA requirements
• Document cybersecurity posture in support of the RMF process
• Facilitate movement of multiple information systems through the RMF process and maintain accreditations through continuous monitoring and annual reviews
• Provide solutions to complex problems that require the regular use of expertise and creativity. Problems are broadly defined and solutions require the continuation of specialized theories and knowledge
• Serve as Subject Matter Expert (SME) on one or more technologies/skills related to A&A activities and documentation
• Participate in sessions aimed at identifying, planning, and executing strategies in response to emerging cybersecurity/RMF policies
• Maintain awareness and knowledge of evolving security and risk management standards and communicate and apply relevant changes to existing processes
• Develop, update, and/or review RMF documentation to include IV&V results, Risk Assessment Reports, and POA&M development
• Develop, update, and/or review cybersecurity documentation for the use of cloud native services such as those offered by Microsoft, Amazon, Oracle, and Google
• Assess system compliance against NIST, DoW, and DHA security requirements to include the NIST 800-53 controls, and DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs)
• Produce evidence as necessary to support compliance status of NIST, and DoW
• Review and assess authorization boundary diagrams, service architecture diagrams, data flow diagrams, hardware and software inventories
• Analyze vulnerability scans of information systems
• Excellent customer service and organization skills
• Excellent oral and written communication skills

Skills

• Bachelor's Degree and ten (10) years of experience with Cybersecurity / Information Technology, or eighteen (18) years of hands-on experience with Cybersecurity / Information Technology in lieu of degree
• Active DoW Secret security clearance
• DoW 8570-compliant certification
• Demonstrated experience assessing, managing, engineering, or architecting cloud technologies from major vendors such as Microsoft, Amazon, or Google
• A cloud related certification such as Google Certified Professional Cloud Architect, Microsoft Azure Fundamentals, AWS Certified SysOps Administrator, or ServiceNow Certified Administrator
• Experience with Risk Management Framework
• Experience in RMF package review, including POA&Ms (mitigation statements), Security Plans, Risk Assessments, architecture diagrams, hardware/software inventories, and system/site policies, procedures, and processes
• Experience working within DoW
• Experience in assessing systems using NIST 800-53 and/or DISA STIGs and SRGs
• Excellent customer service and organization skills
• Excellent oral and written communication skills
• Experience working with DoW or DoN RMF processes or IT systems
• Experience with FedRAMP
• Familiarity and experience with the eMASS
• Technical experience with network, database, containers, AI, or DevOps technologies

Benefits

• 401K plan with company match
• Medical
• Dental
• Vision
• Life insurance
• AD&D
• Flexible spending account
• Disability
• Paid time off
• Flexible work schedule
• Professional training and development

Company Overview