Systems Security Analyst
Magnus Management Group LLC · Sånta Rita-Sumai Municipality, Guam, United States
Information Technology & Services · 11-50 employees
About the role
The Systems Security Analyst will lead RMF lifecycle activities, vulnerability management, and continuous monitoring to protect Facility-Related Control Systems. They will also coordinate with stakeholders, manage security documentation, and participate in cyber incident response efforts.
What they look for
Requirements
Candidates must be US citizens with a Secret clearance and at least five years of RMF experience, including one year in FRCS cybersecurity. A qualifying professional certification such as CISSP, Security+, or GICSP is also required.
Benefits
Full description
Benefits:
- 401(k)
- Dental insurance
- Health insurance
- Paid time off
- Vision insurance
Work Location: Building 3190, Naval Base Guam (NBG), Santa Rita, Guam 96915
Position Overview We are seeking a Systems Security Analyst to support our client. You will help protect the confidentiality, integrity, and availability of Facility-Related Control Systems by leading security engineering, Risk Management Framework (RMF), vulnerability management, continuous monitoring, and incident response activities. This is a mission-essential, hands-on role for a security professional who can work independently, coordinate across technical and government stakeholders, and turn complex compliance requirements into operational results.
Key Responsibilities:
- Drive the end-to-end RMF lifecycle (Steps 1-6) in accordance with current Department of the Navy and NAVFAC Echelon II guidance; verify artifacts for completeness, quality, and compliance and maintain accurate eMASS packages.
- Achieve, maintain, and track Authorities to Operate (ATOs) for FRCS; support annual security reviews and prepare Memorandums for Record for approved baseline changes.
- Develop and maintain security policies, standard operating procedures, and implementation plans mapped to applicable NIST SP 800-53 control families and tailored to the FRCS environment.
- Execute vulnerability and compliance assessments using approved DoN tools such as ACAS, SCAP, and Evaluate STIG; complete manual STIG/SRG validations and maintain .ckl/.cklb checklists.
- Prepare Security Center and eMASSter reports for eMASS integration and ensure vulnerability results are accurately uploaded and maintained in VRAM.
- Sustain system-level continuous monitoring through recurring scans, audit-log analysis, remediation tracking, mitigation, and quarterly POA&M updates.
- Coordinate and support on-site RMF Step 4 validation, including evidence collection and collaboration with system owners and independent validators.
- Serve as a technical representative and/or Configuration Management Officer on the Configuration Control Board, providing security-impact analyses and risk assessments for proposed FRCS baseline changes.
- Support cyber incident response as a member of the MAR Cyber Emergency Response Team, including participation in an on-call rotation and preparation of operational logs and after-action reports.
- Provide bi-weekly RMF status reports to the ISSM, maintain project records in Maximo and/or eProjects, and contribute to monthly status reporting.
Required Qualifications
- Must be a US Citizen
- Must hold Secret Clearance
- Minimum of five years of RMF experience, including at least one year of specialized experience supporting FRCS RMF and cybersecurity engineering activities
- At least one current qualifying certification: CCSP, Cloud+, GICSP, GISF, GSEC, or Security+, RCCE Level 1, CISSO, CISSP-ISSEP, CySA+, FITSP-O, GCLD, GCSA, GSNA.
