RMF Analyst II

Epsilon, Inc. • Oak Ridge, TN, US • 4m ago

RMF Analyst II

Who is Epsilon:
Epsilon is an IT Services company that was founded in 2009 and has become an established leader in providing Information Technology services to both Federal Government and Commercial businesses across the United States. Epsilon is known for its solution-focused and innovative approach, aligning technology systems, tools, and processes with the missions and objectives of its customers.

Epsilon’s headquarters are in Weaverville, NC with other corporate offices in Greenville, SC, Crystal City, VA, and Denver, CO. We have employees in 30+ States across the U.S.

Why work for Epsilon:
In joining Epsilon’s team, you will have the opportunity to contribute to Epsilon’s business and customer initiatives, as well as influence our brand culture through people interaction and technology advancements.

Epsilon invests in our employees by promoting from within and enabling employees to elevate their knowledge and skill set in their profession by allocating $3,000 annually in Professional Development funds. We also offer competitive pay, comprehensive benefits through one of the largest national carriers, Paid Time Off (PTO) that increases with tenure and has a generous rollover, 11 company paid Holidays, and 401(k) with immediate contribution.

Where you’ll work:
This is a hybrid onsite/remote opportunity where you will report in Oak Ridge, TN and have the flexibility to work from home based on business needs.

Our Customer’s Mission:
In support of an Energy customer, you will assist ensuring security and regulatory compliance of enterprise networks, through application of the NIST Risk Management framework and industry best practices.

An average day:
As RMF Analyst II, you will be involved in the review, audit, and authorization of Risk Management Framework (RMF) assessment and authorization (A&A)/ATO Packages and for IT systems of varying size and complexity. You will perform hands-on artifact review along with package management and review. In this position you will:

Lead comprehensive RMF assessments and audits across complex information systems
Author detailed security assessment reports and plans of action and milestones (POA&Ms), Risk Assessment Reports (RARs) and other artifacts associated with the RMF process
Conduct in-depth analysis of complex systems and their interconnections, testing and assessment of all information, artifacts, and other relevant data pertaining to systems progressing through RMF.
Participate in high-level discussions about organizational risk management strategies
Recommend improvements to RMF processes and tools to enhance efficiency and effectiveness
Review and approve system security plans and other RMF documentation
Perform technical (evaluation of technology) and non-technical (evaluation of people and operations) risk and vulnerability assessments of relevant technology focus areas
Make recommendations regarding the selection of cost-effective security controls to mitigate risk (e.g., protection of information, systems and processes).
Review test plans and procedures to ensure the test plan addresses level of effort and validates all RMF requirements.

Basic Qualifications:

As a requirement of this position, all candidates must be a U.S. Citizen. In accordance with 8 U.S.C. 1324b(a)(2)(C), Epsilon will not consider candidates for this position who do not meet the aforementioned conditions.
Five (5) or more years of experience in the Cybersecurity field or combination of related education and experience.
Active Certified Information Systems Security Professional (CISSP) certification from ISC2.
Experience with assessment and authorization (A&A).
Experience with assessing and validating RMF, NIST, and other security controls.
RMF experience in package generation and assessment.
Visio diagram creation and modification.
RMF documentation creation and modification (SSP, CCB, COOP, etc.).
Familiarity with NIST 800-53 controls and applicable overlays.
Ability to provide security assessment reports that cover risks that the client should be aware of and mitigate risk with residual risks remaining.
Desired security certifications and qualifications: Security+ Ce, CySA+, SSCP, GSEC, GICSP, CND, CCNA Security, or equivalent.

Other Requirements:

Must be able to attain and retain DoE L, or DoD Secret clearance.
Must be within a 2-hour commute of the customer location and will be required to travel onsite regularly to perform assessments.

Connect directly with your dedicated recruiter, Jon, on Epsilon’s careers page.
www.epsilon-inc.com/careers

Epsilon is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applications will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. EEO/AA: Minorities/Females/Disabled/Vets.

Please click here to review your rights under EEO policy.

If you are an individual with a disability and need special assistance or reasonable accommodation in applying for employment with Epsilon, Inc., please contact our Recruiting department by phone 828-398-5414 or by email careers@epsilon-inc.com.