RMF / CSAM Analyst
New
J
JobgetherFederal Cybersecurity
United StatesFull-TimeMiddle
Salary75,000 - 104,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- At least 2 years of relevant professional experience
- Required Skills
- Microsoft Office
Requirements
- Bachelor’s degree in cybersecurity, information technology, computer science, or a related discipline.
- At least 2 years of relevant professional experience.
- Strong knowledge of the NIST Risk Management Framework (RMF).
- Experience working with the CSAM tool or comparable security compliance platforms.
- Experience with FedRAMP, FISMA, POA&M management, security control assessments, and continuous monitoring.
- Familiarity with NIST SP 800-63, OMB M-21-31, OMB M-24-15, and federal cloud security requirements.
- Understanding of data encryption, secure logging, and vulnerability management.
- Ability to analyze security assessment results and develop corrective action plans.
- Strong documentation and recordkeeping skills for security evidence and artifacts.
- Proficiency with Microsoft Office and project-tracking tools.
- Excellent written and verbal communication skills for cross-functional collaboration.
Responsibilities
- Manage and maintain Risk Management Framework (RMF) and Cyber Security Assessment and Management (CSAM) activities.
- Ensure security and compliance alignment with FedRAMP, FISMA, NIST SP 800-63, and other federal requirements.
- Maintain security controls, inheritance statements, and documentation required to sustain the Authority to Operate (ATO).
- Track, analyze, and support remediation of Plan of Action and Milestones (POA&M) items, vulnerabilities, and CVEs.
- Analyze security scan results, develop corrective action plans, and monitor remediation progress.
- Support security incident management, continuous monitoring, and cybersecurity reporting.
- Collaborate with ISSOs and technical stakeholders to communicate risks and remediation status.
View Full Description & ApplyYou'll be redirected to the employer's site
