Systems Security Analyst [Various Levels] Contingent

This Position Description establishes the technical requirements, core duties, governance parameters, and qualification standards for the Systems Security Analyst supporting the customer.

Cybersecurity Operations - RMF & Compliance

651 - Systems Security Analyst

Intermediate

No

Phase I Pre-Convergence Service

• →Risk Management Framework (RMF) Administration: Develops, updates, and maintains complete RMF artifact packages ( within the Enterprise Mission Assurance Support Service (eMASS) to achieve and sustain Authorizations to Operate (ATOs) across all in-scope systems, applications, and network enclaves.
• →Vulnerability Scanning & Technical Compliance: Conducts automated and manual vulnerability assessments using Assured Compliance Assessment Solution (ACAS / Tenable Security Center) and delivers monthly STIG/SCAP Compliance Reports.
• →Remediation & Quarantine Management: Formulates weekly Vulnerability Index (VI) reports alongside Plans of Action & Milestones (POA&Ms) via CDRL A020, and tracks non-compliant devices subject to network isolation via Weekly Quarantine Reports.
• →Security Program & Governance Enforcement: Maintains eMASS system documentation and ensures strict operational alignment with DD Form 254 guidelines, AR 380-5, and DoDI 5200.48 Controlled Unclassified Information (CUI) policies.

• Degree: Associate’s or Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, or a related technical field.
• Experience: Minimum of 4 years of hands-on experience developing RMF documentation, executing IA assessments, managing eMASS workflows, and operating ACAS vulnerability scanning suites.

All contractor personnel performing cyberspace functions under this contract must comply with DoDM 8140.03 standards for DCWF Work Role 651 prior to commencing billable work:

• Foundational & Residential Qualification: Must hold active residential qualification credentials and foundational DCWF certifications appropriate for the Intermediate proficiency level.
• Qualifying Certifications:
  • Basic Level Options: Security+ CE, SSCP, CCNA Security.
  • Intermediate Level Options (Target Baseline): CySA+, CCNP Security, CISA, CGRC.
  • Advanced Level Options: CISSP, CISM, SecurityX.

• Clearance Level: Active Secret clearance required prior to contract start; Top Secret/SCI eligible.
• System Vetting: Must complete full vetting through DISS and MP ICAM prior to issuance of Common Access Card (CAC) and elevated system access privileges.