NexGen Data Systems is seeking an Assessment and Authorization (AA) Analyst to manage customer-required Risk Management Framework (RMF) efforts for Department of Defense (DoD) customers. This role will work collaboratively with Information Technology (IT) Engineers and System Administrators to conduct Cyber Security (CS) analysis, mitigation, remediation, and monitoring to ensure compliance with applicable DoD and Department of the Navy (DON) policies, procedures, and regulations. This position includes all activities associated with obtaining and maintaining RMF Authority to Operate (ATO) by the Authorizing Official (AO) for designated assets within the customerrsquos multi-faceted network infrastructure, which includes multiple platforms residing on multiple security enclaves. Roles and Responsibilities Register and manage designated system packages in Enterprise Mission Assurance Support Service (eMASS) Perform all required and approved RMF process steps as described in the applicable RMF Process Guide (RPG) Communicate the security posture of systems through designated reporting mechanism Identify system type and any special considerations to support RMF Step 1 System Categorization Identify mission criticality Identify the security control baseline set and any applicable overlays and tailoring Develop, maintain, and track the Security Plan (SP) Lead security control implementation and testing efforts Initiate the Risk Assessment Report (RAR) Assist with any security testing required as part of AA or annual reviews Assist in the mitigation and closure of open vulnerabilities under the systemrsquos change control process Oversee CS testing to assess security controls and record security control compliance status during the continuous monitoring phase of the lifecycle Develop and implement detailed test plans and review findings from self-assessments to determine readiness for independent validation and verification (IVV) assessment Conduct IVV assessments and analyze test results for accuracy, compliance, and adherence to Federal cybersecurity requirements Document residual risks and provide the cybersecurity risk analysis and mitigation determination results Implement and enforce all DoDDON CS policies and procedures as defined by cybersecurity-related documentation Ensure that all DoD Information System (IS) cybersecurity-related documentation is current and accessible to properly authorized individuals Run or review Assured Compliance Assessment Solution (ACAS) scans and analyze the findings provide recommendations for resolution as needed Identify key stakeholders in AA efforts and ensure system documentation reflects current system security configurations to include hardware and software components, data flow, interconnections, and ports, protocols, and services, etc. Assist customer program offices in interpreting and applying mitigation strategies Participate in AA status meetings and facilitate transitioning systems toward a successful outcome Collaborate with appropriate stakeholders, and participate in the customerrsquos change management process to ensure CS issues are identified, reported, and mitigated or remediated in a timely manner Assist to estimate Level of Effort (LOE) involved in performing A A activities RequiredDesired Skills Bachelor's Degree in IT, Cyber Security, Computer Science, or related field preferred and two years of experience 2+ years of experience, with at least one year of experience in some of the following areas CS policies, procedures, and processes, including RMF and NIST 800-53 Experience using MS office tools such as Excel, Word and Visio Experience working with Security engineering to review Nessus VulnerabilityTripwire compliance scans Experience performing onsite cybersecurity assessments using standards such as CIS Benchmarks, DISA STIGS, etc. Broad technical experience related to IT operations, networks, OS's, and system administration Familiarity with NIST publications, specifically RMF and NIST controls Familiarity with dealing with defense-in-depth, and other information security and assurance principles and associated supporting technologies Excellent customer service and organization skills Excellent verbal and written communication skills Must demonstrate proficiency in the following areas multitasking, critical thinking and the ability to work quickly, efficiently and accurately in a dynamic and fluid environment Ability to work both independently and as a member of a team Other requirements A strong sense of urgency including self-governance on task priority Eagerness to learn with a quality, detailed-focus is essential Ability to collaborate with awareness and responsiveness to customer needs Commitment to continuous development and improvement Must meet the requirements to obtain and maintain a DoD Secret clearance Ability to attain and maintain a United States Department of Defense security clearance 8570.01m compliance (IAT level II) is required and must be obtained prior to start date or within 60 days (Minimum Security+ and DB certification) Excellent interpersonal and communication (verbal and written) skills Travel as required Other Duties Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. About the Company NexGen Data Systems is an emerging technologies focused company providing expert systems and network engineering solutions to the Department of Defense. NexGen Data Systems promotes a culture of knowledge and career advancement through continued learning, keeping our team current on the latest advances in systems and networking, and enabling our team to provide the best available solutions to our clients. Benefits Company covers 100 of premiums for the employeersquos medical, dental, and vision insurance and subsidizes 50 of premiums for spouse and dependents. 401(k) match up to 10 of the employeersquos salary contributions to 401(K) plan. Company supplied educational books, resources, and 100 of certification test costs. 10 paid holidays and 15 days of paid time off (PTO). NOTE US Citizens and those authorized to work in the US are encouraged to apply. In order to be qualified for this position, you must be able to obtain and maintain a United States Department of Defense (DoD) security clearance. We are unable to sponsor Visas at this time. NexGen Data Systems provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws.