Cyber Defense - RMF Analyst

Job ID: 2615743

Location: Colorado Springs, CO, US

Date Posted: 2026-08-17

Category: Cyber

Subcategory: Cyber Engineer

Schedule: Full-Time

Shift: Day Job

Travel: No

Minimum Clearance Required: TS.SCI

Clearance Level Must Be Able to Obtain: None

Potential for Remote Work: ORA_ON_SITE

Description

Cyber Analyst RMF Specialist

Join our team and play a pivotal role in defending North America. We are seeking a highly skilled Cyber Analyst RMF Specialist in Colorado Springs, CO to support the critical North American Aerospace Defense Command and United States Northern Command (N&NC) Information Technology Enterprise Services (NITES) contract in Colorado Springs, CO.

In this role, you will act as a key technical compliance specialist. You will hold administrator-level access to information systems to perform advanced vulnerability and compliance scanning and manage Security Technical Implementation Guide (STIG) compliance. Crucially, you will bridge the gap between technical operations and cyber governance by directly supporting the Risk Management Framework (RMF) team, maintaining up-to-date system records in Enterprise Mission Assurance Support Service (eMASS), and executing rapid response protocols to downward-directed Cyber Tasking Orders (CTASKORDs).

Responsibilities

The selected candidate will be responsible for the following technical and compliance activities:

• Directly support the Risk Management Framework (RMF) team by registering, updating, and maintaining continuous monitoring records within the eMASS.
• Maintain administrator-level access to enterprise information systems to configure, manage, and perform regular Assured Compliance Assessment Solution (ACAS) and Security Content Automation Protocol (SCAP) compliance scans.
• Analyze scan results to ensure continuous patching and STIG compliance.
• Implement, track, and validate system hardening measures across Windows, Linux, and network enclaves.
• Lead the execution, tracking, and operational response to Cyber Tasking Orders (CTASKORDs) and other downward-directed orders when STIG compliance gaps must be urgently addressed.
• Translate technical scan findings and non-compliant STIG items into actionable Plan of Action and Milestones (POA&Ms), maintaining accurate tracking of remediation milestones.
• Maintain continuous cyber security posture and system hygiene to ensure systems remain in a Cyber Operational Readiness Assessment (CORA) ready state.
• Provide clear vulnerability status updates, technical mitigations, and compliance roadmaps to System Owners, technical administration teams, and leadership.

Qualifications

Required Qualifications:

• Active TS/SCI security clearance
• Certification required per DoDD 8140.03, Intermediate Level (e.g., CompTIA CySA+, Security+ CE, GSEC, or equivalent)
• BS or equivalent work experience in the Information Assurance, Cybersecurity, or Systems Administration field
• 5+ years of overall IT and cybersecurity experience
• Demonstrated experience with defending identity services, domain environments, Active Directory, and Windows/Linux server systems
• 2+ years of experience as an ISSO for DoD systems
• Experience using STIG Viewer and SCAP tools, such as EvaluateSTIG

Desired Qualifications:

• Familiarity with enterprise vulnerability scanners and continuous network monitoring tools
• Previous experience operating in a highly complex, metrics-driven DoD cybersecurity environment
• Familiarity with the use of eMASS as a central repository for RMF artifacts

Target salary range: $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.


SAIC is a premier technology integrator providing full life cycle services and solutions in the technical, engineering, intelligence, and enterprise information technology markets. SAIC is Redefining Ingenuity through its deep customer and domain knowledge to enable the delivery of systems engineering and integration offerings for large, complex projects. SAIC's approximately 15,000 employees are driven by integrity and mission focus to serve customers in the U.S. federal government. Headquartered in Reston, Virginia, SAIC has annual revenues of approximately $4.5 billion. For more information, visit saic.com. For information on the benefits SAIC offers, see .