What are the responsibilities and job description for the Information Systems Security Analyst (RMF) - Senior position at Electronic Consulting Services, Inc (ECS Federal)?
Job Description
Position Summary
ECS is seeking an Information Systems Security Analyst (RMF) - Senior to support the Army National Guard (ARNG) Enterprise Network Operations and Cybersecurity Support (ENOCS) program. In this role, the analyst supports Task 3 - Cybersecurity Operations Support by executing Risk Management Framework (RMF) activities for assigned information systems, maintaining system security documentation and authorization artifacts, validating control implementation, updating eMASS records, and tracking remediation actions required to sustain Authorization to Operate (ATO) status. The position works closely with ISSOs, engineers, system owners, and broader cybersecurity operations personnel to document compliance evidence and sustain continuous monitoring activities across the ENOCS enterprise.
This role directly contributes to ARNG's mission to defend classified and unclassified network environments across the DoDIN-Army-NG area of responsibility, supporting more than 120,000 users and approximately 141,000 endpoints across roughly 2,800 sites in 54 states and territories. ENOCS supports Title 10 and Title 32 missions, mobilization readiness, domestic emergency response, and classified SIPRNet operations, requiring disciplined RMF execution across both NIPRNet and SIPRNet-aligned environments. Within the ENOCS cyber operations ecosystem, this position helps maintain compliant, continuously monitored systems in coordination with 24x7x365 cybersecurity operations and in alignment with operational interfaces that include NETCOM Global Cyber Center, DISA DCDC, eMASS-based authorization workflows, vulnerability analysis, STIG compliance reviews, and ongoing ATO maintenance.
Please Note: This position is contingent upon contract award.
Responsibilities
Required Skills
Required Qualifications
U.S. Citizenship is required
Security Clearance: Secret Eligible
Required Certifications: DCWF Work Role 722-Information Systems Security Manager - Basic proficiency; must hold ONE OR MORE of the following: CC
Experience: 3 years of experience in information assurance
Desired Skills
Desired Qualifications
Security Clearance: Active Secret (preferred)
Everforth ECS is the federal segment of Everforth , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.
Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.
We value:
Position Summary
ECS is seeking an Information Systems Security Analyst (RMF) - Senior to support the Army National Guard (ARNG) Enterprise Network Operations and Cybersecurity Support (ENOCS) program. In this role, the analyst supports Task 3 - Cybersecurity Operations Support by executing Risk Management Framework (RMF) activities for assigned information systems, maintaining system security documentation and authorization artifacts, validating control implementation, updating eMASS records, and tracking remediation actions required to sustain Authorization to Operate (ATO) status. The position works closely with ISSOs, engineers, system owners, and broader cybersecurity operations personnel to document compliance evidence and sustain continuous monitoring activities across the ENOCS enterprise.
This role directly contributes to ARNG's mission to defend classified and unclassified network environments across the DoDIN-Army-NG area of responsibility, supporting more than 120,000 users and approximately 141,000 endpoints across roughly 2,800 sites in 54 states and territories. ENOCS supports Title 10 and Title 32 missions, mobilization readiness, domestic emergency response, and classified SIPRNet operations, requiring disciplined RMF execution across both NIPRNet and SIPRNet-aligned environments. Within the ENOCS cyber operations ecosystem, this position helps maintain compliant, continuously monitored systems in coordination with 24x7x365 cybersecurity operations and in alignment with operational interfaces that include NETCOM Global Cyber Center, DISA DCDC, eMASS-based authorization workflows, vulnerability analysis, STIG compliance reviews, and ongoing ATO maintenance.
Please Note: This position is contingent upon contract award.
Responsibilities
- Execute RMF activities for assigned information systems by maintaining System Security Plans (SSPs), Security Controls Traceability Matrices (SCTMs), POA&Ms, and related authorization artifacts in accordance with DoD and ARNG cybersecurity policy.
- Update and maintain eMASS records with required artifacts, security documentation, self-assessment data, and remediation status to support ongoing authorization and continuous monitoring.
- Validate implementation of security controls and compile objective evidence to support security compliance reviews, assessments, and authorization decisions.
- Track POA&M items and remediation actions through closure, coordinating with ISSOs, engineers, and system owners to address non-compliant controls and sustain ATO status.
- Support continuous monitoring activities by documenting control status, approved risk thresholds, and changes affecting system cybersecurity posture under senior guidance.
- Coordinate RMF-related inputs with cybersecurity operations teams supporting classified and unclassified ARNG environments, including systems operating across NIPRNet and SIPRNet mission enclaves.
- Assist with preparation of documentation packages and supporting evidence for submission into eMASS and for review by ISSM and Authorizing Official stakeholders.
- Support compliance reviews tied to evolving guidance, including STIGs, NIST-based security requirements, vulnerability analysis, and associated artifact updates for assigned systems.
- Collaborate with Task 3 Cybersecurity Operations personnel to ensure RMF activities align with broader ENOCS defensive cyberspace operations, 24x7x365 cybersecurity monitoring, and coordination requirements with NETCOM Global Cyber Center and DISA DCDC.
Required Skills
Required Qualifications
U.S. Citizenship is required
Security Clearance: Secret Eligible
Required Certifications: DCWF Work Role 722-Information Systems Security Manager - Basic proficiency; must hold ONE OR MORE of the following: CC
Experience: 3 years of experience in information assurance
- Experience maintaining RMF documentation sets, including SSPs, SCTMs, POA&Ms, and authorization support artifacts for assigned information systems.
- Experience updating and managing system records in eMASS, including entry of supporting artifacts, compliance data, and remediation tracking information.
- Ability to document security control implementation evidence and support assessment coordination with ISSOs, engineers, and system owners.
- Experience tracking remediation activities and documenting progress to support continuous monitoring and maintenance of ATO status.
- Familiarity with ARNG or DoD cybersecurity compliance activities spanning classified and unclassified information systems environments.
- Ability to support security compliance reviews involving STIGs, vulnerability findings, and required updates to authorization documentation.
Desired Skills
Desired Qualifications
Security Clearance: Active Secret (preferred)
- Experience supporting RMF activities in enterprise environments operating at large scale across geographically distributed sites.
- Familiarity with ARNG, Army, or DoD mission environments supporting Title 10 and Title 32 operations, mobilization readiness, or domestic emergency response.
- Experience supporting systems or documentation packages associated with NIPRNet and SIPRNet environments.
- Familiarity with continuous monitoring practices that integrate vulnerability analysis, security compliance reviews, and ongoing authorization maintenance.
- Experience coordinating RMF or compliance activities in organizations that interface with NETCOM, DISA, or enterprise cybersecurity operations teams.
Everforth ECS is the federal segment of Everforth , a $4B global organization with over 10,000 employees. Our nearly 3,500 professionals deliver advanced technology solutions in data and AI, cybersecurity, and enterprise transformation, serving defense, intelligence, and federal civilian agencies.
Our work powers mission-critical outcomes, strengthens technology partnerships, and creates meaningful opportunities for our people. We are defined by a commitment to excellence in delivery, a culture of innovation, and an environment where talent can thrive and grow.
We value:
- Attracting and developing top talent and high-performing teams
- Fostering a culture that is engaging, accountable, and mission-driven