Cybersecurity Compliance & Authorization Analyst

As a premier provider of management, engineering, information technology, and logistics services, STF is committed to delivering high-quality systems engineering, technical and professional support services that meet and exceed deliverable requirements.

STF offers superior out-of-the-box solutions to end-to-end problems and customer-centric support to the United States Government, Military, Department of Defense (DoD), and other federal agencies.

Job Summary The Cybersecurity Compliance & Authorization Analyst supports the implementation and sustainment of Risk Management Framework (RMF) controls for PMW 790 STACC systems, ensuring compliance with DoD, Navy, and NAVWAR cybersecurity policies throughout the system lifecycle.

This role maintains security documentation, monitors vulnerabilities, and collaborates with engineering, testing, and operations teams to preserve an authorized and resilient cybersecurity posture across multiple enclaves.

Responsibilities and Duties

• Implement, assess, and maintain RMF security controls, ensuring compliance with DoD 8510.01, NIST SP 800-53, and NAVWAR cybersecurity guidance.
• Develop, update, and maintain security accreditation documentation, including System Security Plans (SSPs), Plan of Action and Milestones (POA&Ms), and Security Assessment Reports (SARs).
• Monitor system vulnerabilities and mitigation actions through continuous monitoring activities, periodic reviews, and control assessments using VRAM, ACAS, and STIG checklists.
• Support coordination and submission of ATO / ATC packages in eMASS, ensuring completeness and traceability.
• Review system configurations and changes for security impact and maintain alignment with configuration management.
• Assist in security-incident detection, analysis, and response in collaboration with the Cyber Operations team.
• Conduct risk assessments and provide remediation or system-hardening recommendations.
• Participate in cybersecurity working groups, audits, and inspections.
• Provide cybersecurity awareness and compliance guidance to system administrators, developers, and other users.

Qualifications and Skills Required knowledge and years of experience

• Experience supporting ATO sustainment and vulnerability-management processes within Navy or DoD enterprise networks is preferred
• RMF, eMASS, STIG, and ACAS experience.
• Security+ CE or higher (IAT II).
• 5 + years of DoD cyber-compliance experience.
• Ability to work both independently and as part of a cross-functional team; ready for occasional travel or onsite support as required.
• Proven problem-solving abilities with strong analytical and troubleshooting skills.
• Excellent communication skills :
• able to explain technical issues to technical and non-technical stakeholders.   Education Requirements Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field (or equivalent experience) Certifications Security+ CE or higher (IAT II).

Clearance Requirement Secret (eligible for TS / SCI) Benefits and Perks At STF, we recognize that talented employees are the foundation of our success .  STF provides benefits and compensation packages to help our employees meet the diverse and changing needs throughout their careers and lives.   Benefits packages include the following :

• Medical Plans administered through United HealthCare Vision and Dental Plan Benefits 401(k) Tax-Deferred Retirement Plan Accidental Death and Dismemberment Insurance Dependent / Medical Care Flexible Spending Account Direct Deposit Health and Welfare Medical Holiday Leave Industry Competitive Salaries Life Insurance (basic and supplemental)  Paid Time Off / Annual Comprehensive Personal Leave Performance / Award Bonuses Professional Development Coursework Technical Training  Tuition Assistance Program TotalChoice™ Voluntary Benefits STF Cares / Paid Time Off to Volunteer  Equal opportunity employer as to all protected groups, including protected veterans and individuals with disabilities   #IND123 Powered by JazzHR