Systems Technology Forum, Ltd. (STF) · 1 month ago
Cybersecurity Compliance & Authorization Analyst
Systems Technology Forum LTD (STF) is an established industry partner committed to delivering high-quality systems engineering, technical and professional support services. The Cybersecurity Compliance & Authorization Analyst supports the implementation of Risk Management Framework controls for PMW 790 STACC systems, ensuring compliance with cybersecurity policies while maintaining security documentation and collaborating with various teams.
ConsultingIndustrial EngineeringInformation TechnologyIT Management
Responsibilities
Implement, assess, and maintain RMF security controls, ensuring compliance with DoD 8510.01, NIST SP 800-53, and NAVWAR cybersecurity guidance
Develop, update, and maintain security accreditation documentation, including System Security Plans (SSPs), Plan of Action and Milestones (POA&Ms), and Security Assessment Reports (SARs)
Monitor system vulnerabilities and mitigation actions through continuous monitoring activities, periodic reviews, and control assessments using VRAM, ACAS, and STIG checklists
Support coordination and submission of ATO/ATC packages in eMASS, ensuring completeness and traceability
Review system configurations and changes for security impact and maintain alignment with configuration management
Assist in security-incident detection, analysis, and response in collaboration with the Cyber Operations team
Conduct risk assessments and provide remediation or system-hardening recommendations
Participate in cybersecurity working groups, audits, and inspections
Provide cybersecurity awareness and compliance guidance to system administrators, developers, and other users
Qualification
Required
RMF, eMASS, STIG, and ACAS experience
Security+ CE or higher (IAT II)
5 + years of DoD cyber-compliance experience
Ability to work both independently and as part of a cross-functional team; ready for occasional travel or onsite support as required
Proven problem-solving abilities with strong analytical and troubleshooting skills
Excellent communication skills: able to explain technical issues to technical and non-technical stakeholders
Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field (or equivalent experience)
Secret (eligible for TS/SCI)
Preferred
Experience supporting ATO sustainment and vulnerability-management processes within Navy or DoD enterprise networks is preferred
Benefits
Medical Plans administered through United HealthCare
Vision and Dental Plan Benefits
401(k) Tax-Deferred Retirement Plan
Accidental Death and Dismemberment Insurance
Dependent / Medical Care Flexible Spending Account
Direct Deposit
Health and Welfare Medical
Holiday Leave
Industry Competitive Salaries
Life Insurance (basic and supplemental)
Paid Time Off / Annual Comprehensive Personal Leave
Performance / Award Bonuses
Professional Development Coursework
Technical Training
Tuition Assistance Program
TotalChoice™ Voluntary Benefits
STF Cares / Paid Time Off to Volunteer