Jobs and Careers
PH

Cybersecurity Certification and Accreditation Analyst [JOB ID: 20250128]

Phoenix Cyber
United States - Remote, United StatesRemotefull_timeVerifiedPosted 28 Jan 2025

About the role

Phoenix Cyber is looking for a Cybersecurity Certification and Accreditation Analyst to join our client delivery team. This is a remote, work-from-home position with the possibility of minimal travel within the continental United States.

Qualifications
  • Bachelor's Degree in technical discipline or equivalent and 5+ years related experience.
  • 5 years of relevant Risk Management Framework (RMF) and NIST C&A experience
  • DOD cybersecurity experience
  • 3+ Years of experience with Enterprise Mission Assurance Support Service (eMASS)
  • DOD Secret Clearance
  • Experience in assessing security controls and conducting authorization reviews for large, complex organizations
  • 5+ Years of experience producing and maintaining DoD Certification & Accreditation Packages (DIACAP) or RMF package development and submission
  • 5+ Years of experience understanding and implementing DoD, DISA, Joint Staff, CNSSI and NIST cybersecurity instructions, publications and policies
  • 5+ Years of experience in understanding and validating NIST 800-53 Security Controls; CNSSI 1253 Security Controls and Overlays
  • Demonstrated knowledge of Cyber Security and enterprise cyber security solutions.

Responsibilities
  • Responsible for all application security controls, RMF compliance, and Authority to Operate
  • Key to the success of this position is the successful delivery of projects and effective communication to all levels of staff for reporting project status
  • The analyst will serve as a Subject Matter Expert (SME) in cybersecurity, ensuring that all information systems are authorized in compliance with established policies and procedures
  • This position is critical in evaluating security controls and determining the severity of vulnerabilities, as well as briefing senior management on the progress of information systems undergoing the authorization process
  • Serves as a cybersecurity Subject Matter Expert (SME) with regards to the authorization of information systems and all associated cybersecurity policies and procedures
  • Fully versed in the general tenets supporting the overall DOD implementation of its authorization process, to include supporting cybersecurity policy, procedures and processes
  • Performs a DOD cybersecurity process while either authorizing an information system or serving as a SME for an information system undergoing authorization
  • Possess an understanding of how the security controls identified in the NIST 800-53 apply to the process of assessing and authorizing a large organization's IT infrastructure
  • Conducts accurate evaluation of the level of security required
  • Possess an understanding of how the security controls identified in the NIST 800-53 and NIST 800-82
  • Determines the applicable severity value for an identified vulnerability (e.g., non-compliant security control), and determines the possible ramifications on the system's current or future authorization
  • Required to brief senior management on the progress or results of an information system undergoing the authorization process
  • Experience utilizing DoD tracking systems to input/document cybersecurity deficiencies, vulnerabilities, and change requests in the appropriate tracking system for each program, e.g., Jira, HP ALM, and eMASS.
  • Expertise in implementing, documenting, and maintaining baseline configuration frameworks for a range of IT systems, including operating systems, and applications, with a focus on industry-recognized standards such as CIS (Center for Internet Security) and DISA STIGs (Defense Information Systems Agency Security Technical Implementation Guides)
  • Assessing and continuously monitoring cybersecurity risk ensuring that legacy and new capabilities adhere to enterprise standards such as Risk Management Framework (RMF), Cybersecurity Framew

Apply for this role

Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.

Apply Now →Generate Application Kit

Free account required — sign up in 30s

Company

Phoenix Cyber

View company profile →