Cybersecurity Navy RMF Package Submission Office Analyst

Cybersecurity Navy RMF Package Submission Office Analyst

Key Role:

Support a Naval client providing Navy Risk Management Framework (RMF) cybersecurity support for the system, application, and network packages within the domain by performing full package review of RMF process steps, as defined in the Navy's RMF Process Guide. Conduct in-depth reviews of authorization packages and artifacts within Enterprise Mission Assurance Support Service (eMASS), reviewing, analyzing, and reporting on current authorization status and Authorization Termination Dates (ATD) for all systems within the client's portfolio and review Security Assessment Plans, System-Level Continuous Monitoring Plans, Implementation Plans, Security Control Tailoring Plans, Plans of Actions and Milestones, and Security Assessment Reports (SAR). Review completed Assured Compliance Assessment Solution (ACAS) scans and Security Technical Implementation Guide (STIG) checklists and perform all coordination functions with the Security Control Assessor Liaisons and Navy Authorizing Official Cyber Security Analysts (CSA) for Security Authorization Package review, processing requirements, and issues associated with Checkpoint schedules. Maintain a real-time status of all supporting commands' authorization packages via the currently approved database, make determinations if there are risk posture changes when system modifications are requested for authorized systems, the brief status of RMF package reviews, and recommendations for concurrence to the client, and demonstrate and retain requisite cybersecurity knowledge in multiple areas to be able to properly inform and support the varied work activities.

You Have:

• Experience with Department of Navy (DON) RMF
• Experience with Enterprise Mission Assurance Support Service (eMASS)
• Experience with reviewing completed Assured Compliance Assessment Solution (ACAS) scans and Security Technical Implementation Guide (STIG) checklists
• Experience with vulnerability assessment scanning tools and reporting, intrusion detection technologies, intrusion prevention technologies, and host-based security system (HBSS)
• Experience with test and evaluation for allocating assigned security controls into assessment objectives and procedures, developing and executing Security Assessment Plans (SAP), and applying sequencing to reduce duplication of effort
• Ability to conduct independent analysis using governance and instruction to identify solutions and ways forward
• Ability to provide verbal instruction and support on Navy RMF processes
• Secret clearance
• Associate’s degree
• Cybersecurity Workforce (CSWF) Cyber IT Certification under 8570.1-M IAM I or II, or 8140 for work role 611/612

Nice If You Have:

• Knowledge of Navy IT sites, systems, and infrastructure, including NCS and PIT
• Knowledge of applicable Navy systems, networks, and IT infrastructure

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Build Your Career:

Rewarding work, fun challenges, and a ton of investment in our people—that’s Booz Allen cyber. When you join Booz Allen, we’ll help you develop the career you want.

• Competitions — From programming competitions at our PyNights (Python competition and learning events) to competing in CTFs, we’ve got plenty of chances for you to show off your skills.
• Paid Research — Have an innovative idea to explore or hypothesis to test? You can participate in challenges via our crowdsourcing platform, the Garage, and other programs to be awarded dedicated time and/or funding to advance your skills.
• Cyber University — CyberU has more than 5000 instructor-led and self-paced cyber courses, a free online library that you can access from just about anywhere—including your phone—and certification exam prep guides that include practical assessments to prepare you for your exam.
• Academic Partnerships — In addition to our tuition reimbursement benefit, we’ve partnered with University of Maryland University College to offer two graduate certificate programs in cybersecurity—fully funded without a tuition cap.
• Maker/Hackerspaces — Race drones, print 3D gadgets, drink coffee from our Wi-Fi coffee maker, and get hands-on training on tools and tech from in-house experts in our dedicated maker and hackerspaces.

We’re an EOE that empowers our people—no matter their race, color, religion, sex, gender identity, sexual orientation, national origin, disability, veteran status, or other protected characteristic—to fearlessly drive change.