Description
Position Summary
We are seeking a skilled Cybersecurity Analyst to support the implementation and accreditation of a Department of Defense system. In this hands-on role, you will contribute directly to achieving ATO readiness by conducting technical assessments, preparing security evidence, and developing RMF artifacts for submission.
This is a mid-level position focused on the execution and documentation of cybersecurity tasks, not program management.
Key Responsibilities
-
RMF Documentation & Support
-
Develop and maintain System Security Plan (SSP), POA&M, SCTM, and other RMF artifacts in eMASS.
-
Collect, organize, and maintain implementation evidence for submission.
-
Technical Security Assessment
-
Analyze results of vulnerability scans using Nessus or similar vulnerabilities assessment tools.
-
Perform application and database testing using enterprise-class vulnerabilities testing platforms (e.g. WebInspect, AppDetective, or equivalent).
-
Validate and document compliance against DISA STIG using Stig Viewer and SCAP tools.
-
Track remediation efforts and support retesting of findings.
-
System Boundary & Architecture Diagrams
-
Develop and maintain system boundary, data flow, and network topology diagrams in accordance with RMF and DoD requirements (e.g., PL-08, IA-5).
-
Ensure diagrams accurately reflect subnets, ports, protocols, authentication flows, and boundary controls, and meet government RMF accreditation template requirements for eMASS submission.
-
Authentication & Access Management
-
Verify and validate PKI, SAML, SSO, LDAP, Active Directory, and CAC certificate implementations.
-
Document authentication and identity management configurations for accreditation.
-
Security Testing & Monitoring
-
Support configuration audits, patch validation, and penetration test remediation.
-
Conduct log review and event correlation in SIEM platforms (e.g., Splunk, ELK, ArcSight) as part of RMF evidence gathering.
-
Monitor vulnerabilities and recommend corrective actions to maintain compliance.
-
Documentation & Reporting
-
Draft security test results, vulnerability reports, incident documentation, and weekly RMF status updates.
-
Maintain version control of all RMF deliverables and artifacts.
-
Collaboration & Compliance
-
Work closely with system engineers, developers, ISSOs/ISSMs, and government stakeholders to address cybersecurity gaps.
-
Ensure alignment with DoD, NIST SP 800-53, and FedRAMP requirements.
Required Qualifications
-
U.S. Citizenship with an Active Secret clearance or eligibility (Interim Secret acceptable; TS/SCI preferred).
-
3+ years of cybersecurity experience applying RMF, NIST SP 800-53, or DoD A&A processes.
-
Direct experience with eMASS package development and maintenance.
-
Strong knowledge of DoD cybersecurity policies, DISA STIGs, and vulnerability management practices.
-
Ability to create and interpret system boundaries and data flow diagrams for RMF submissions.
-
Solid understanding of PKI, LDAP/AD, CAC/Certificate management, and SSO/SAML integrations.
-
Strong technical writing and documentation skills.
Nice to Have
-
Additional DoD-approved certifications (CySA+, SecurityX, CISSP)
-
Familiarity with SaaS enterprise platforms and FedRAMP control inheritance.
-
Experience with SIEM tools (Splunk, ELK, ArcSight) for event analysis.
-
Knowledge of the MITRE ATT&CK framework applied to vulnerability and threat analysis.
-
Background in DoD acquisition or contract writing systems.
Location
The candidate will be required to interact and coordinate with external project team members and other Avum employees remotely, supporting core Eastern Standard Time (EST) hours. As a remote employee, the candidate will not have a permanent office or desk space but may be required to attend in-person meetings. This may require travel to government sites located in Washington, D.C., and the Avum office located in Agoura Hills, California. Our priority is acquiring the most qualified candidate to satisfactorily perform the required tasks, including team collaboration, regardless of the candidate’s geographical location.
NOTE: This fully remote role requires the candidate to participate in meetings virtually using tools like Microsoft Teams. Online availability during the core Eastern Standard Time (EST) hours, Monday through Friday, will be required.
About Avum
Avum, Inc. is a certified Small Disadvantaged Business who provides advanced software, database, and business intelligence systems to the DoD/Military, Intelligence Community, and Federal, State, Local and Commercial clients since 1991. We manage technical programs and projects and provide strategic guidance to support our customer's system engineering efforts. We provide sustainment in mission-critical and secure environments. We support information assurance activities and accreditation for the systems we deploy. Our engineers conduct rapid prototyping and Agile customer-focused iterations to produce complex applications, predictive analytic data environments, and NIST SP 800-53 compliant system architecture deployed within Navy and DoD networks. We have subject matter experts in multiple domains and technical expertise across all core technology stacks. We specialize in application development, large-scale database design, data engineering, and data visualization. Through results-driven, agile collaboration, the company continually researches and deploys secure solutions that exceed customer expectations in meeting or beating customer-allocated budgets and schedules. We aspire to the highest standards of ethical behavior and professional integrity in providing our customers with service that consistently earns us the highest possible performance ratings.
Avum, Inc. does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.