Systems Security Analyst
Position Overview
This Position Description establishes the technical requirements, core duties, governance parameters, and qualification standards for the Systems Security Analyst supporting the customer.
Parameter | Specification Details |
|---|---|
Capability Area | Cybersecurity Operations - RMF & Compliance |
DCWF Work Role Code | 651 - Systems Security Analyst |
Minimum Proficiency Level | Intermediate |
Key Personnel Designation | No |
Service Classification | Phase I Pre-Convergence Service |
Core Responsibilities
- Risk Management Framework (RMF) Administration: Develops, updates, and maintains complete RMF artifact packages ( within the Enterprise Mission Assurance Support Service (eMASS) to achieve and sustain Authorizations to Operate (ATOs) across all in-scope systems, applications, and network enclaves.
- Vulnerability Scanning & Technical Compliance: Conducts automated and manual vulnerability assessments using Assured Compliance Assessment Solution (ACAS / Tenable Security Center) and delivers monthly STIG/SCAP Compliance Reports.
- Remediation & Quarantine Management: Formulates weekly Vulnerability Index (VI) reports alongside Plans of Action & Milestones (POA&Ms) via CDRL A020, and tracks non-compliant devices subject to network isolation via Weekly Quarantine Reports.
- Security Program & Governance Enforcement: Maintains eMASS system documentation and ensures strict operational alignment with DD Form 254 guidelines, AR 380-5, and DoDI 5200.48 Controlled Unclassified Information (CUI) policies.
Minimum Qualifications & Certification Standards
Education & Experience Requirements
- Degree: Associate’s or Bachelor’s Degree in Cybersecurity, Computer Science, Information Technology, or a related technical field.
- Experience: Minimum of 4 years of hands-on experience developing RMF documentation, executing IA assessments, managing eMASS workflows, and operating ACAS vulnerability scanning suites.
DoDM 8140.03 Workforce Qualification Standards
All contractor personnel performing cyberspace functions under this contract must comply with DoDM 8140.03 standards for DCWF Work Role 651 prior to commencing billable work:
- Foundational & Residential Qualification: Must hold active residential qualification credentials and foundational DCWF certifications appropriate for the Intermediate proficiency level.
- Qualifying Certifications:
- Basic Level Options: Security+ CE, SSCP, CCNA Security.
- Intermediate Level Options (Target Baseline): CySA+, CCNP Security, CISA, CGRC.
- Advanced Level Options: CISSP, CISM, SecurityX.
Security Clearance & Vetting
- Clearance Level: Active Secret clearance required prior to contract start; Top Secret/SCI eligible.
- System Vetting: Must complete full vetting through DISS and MP ICAM prior to issuance of Common Access Card (CAC) and elevated system access privileges.
Position & Compensation Disclaimer (Pay Transparency Mandates):
Employment for this role is conditional upon contract award, executed funding, and client approval. Advertised ranges do not constitute a binding promise of specific salary. In compliance with applicable federal, state, and municipal pay transparency requirements—including but not limited to pay disclosure rules in California, Colorado, New York, and Washington—posted salary bands remain flexible. Compensation ranges may be modified prior to an offer to reflect candidate expertise, client budget constraints, and localized geographic pay scales tied to the assigned work site or state of residence.