RMF IT Security Analyst
Bethesda, Maryland
Experience: 0
Category: Information Technology
Contractor Work Model: Hybrid
Brand: System One
Compensation Range: 120000.00 - 130000.00
Job ID: 377425
Date Posted: 07/24/2026
Shortcut: http://jobs.systemone.com/XALJGO
Job Title: RMF IT Security Analyst
Location: Bethesda, Maryland
Type: Direct Hire / Perm
Work Model: 99% remote with occasional onsite for meetings
Security Clearance: Public Trust
Position Summary
The RMF IT Security Analyst serves as a mid-level cybersecurity professional. Working under Lead and Senior RMF personnel, the analyst independently supports RMF lifecycle activities, security assessments, continuous monitoring, and compliance initiatives while mentoring junior staff. Work is primarily remote with occasional on-site meetings.
Key Responsibilities
- Support the implementation and maintenance of the NIST RMF program.
- Develop, review, and maintain RMF documentation including SSPs, SARs, POA&Ms, and authorization packages.
- Support system categorization, security control selection, assessments, authorization, and continuous monitoring.
- Maintain the Risk Management Register and track remediation activities.
- Support cybersecurity audits and assessments conducted by NIH, HHS, OIG, GAO, and other oversight organizations.
- Support Cybersecurity Supply Chain Risk Management (C-SCRM) activities, including vendor documentation and SBOM reviews.
- Manage or assist with Risk Mitigation Waivers, documentation, approvals, annual reviews, and tracking.
- Coordinate contingency plan testing and document results and corrective actions.
- Communicate risk posture and compliance status while collaborating with system owners, ISSOs, and technical teams.
- Provide technical guidance and mentoring to junior analysts.
Required Qualifications
Bachelor's degree in a related technical field (or equivalent experience) and 3–5 years supporting RMF, cybersecurity compliance, or information security programs.
Preferred Qualifications
- Experience supporting federal civilian agencies, including NIH, HHS, or other Federal agencies.
- Familiarity with NIST RMF, NIST SP 800-37, NIST SP 800-53 Rev. 5, and the Joint Cybersecurity Assessment Methodology (JCAM).
- Experience using eMASS or similar Governance, Risk, and Compliance (GRC) platforms.
- Experience supporting cybersecurity audits, POA&M management, continuous monitoring, and contingency planning.
- Knowledge of Cybersecurity Supply Chain Risk Management (C-SCRM).
- Experience developing or reviewing SSPs, SARs, SAPs, POA&Ms, and Authorization Packages.
Desired Certifications
- ISC2 Certified in Cybersecurity (CC)
- CompTIA Security+
- CompTIA CySA+
- CompTIA SecurityX (formerly CASP+)
- CompTIA PenTest+
- CAP/CGRC
- CISSP
- CISM
Knowledge, Skills, and Abilities
Strong analytical, organizational, and communication skills with knowledge of RMF processes, documentation, and federal cybersecurity compliance. Ability to collaborate with system owners, ISSOs, and technical teams.
Work Environment
This position is primarily remote with occasional on-site meetings or support activities as required.
System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.
System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.
#M-2
#LI-CB5
Ref: #856-Baltimore-S1
-
Junior Security Control Assessor
Bethesda, Maryland
Location: Bethesda, MD (mostly remote, occasional onsite required) Work schedule: 40 hrs/week Compensation: $100,000–$115,000/year Target start: by end of August 2026 Clearance / Public Trust: Public Trust eligibility (Tier 2/3) required About the role...
Date Posted: 07/24/2026 Recommended
-
Mid-Level Security Control Assessor
Bethesda, Maryland
Job Title: Mid-Level Security Control Assessor Location: Bethesda, Maryland Type: Direct Hire Salary: $140,000 range annually, plus benefits Work Model: Hybrid – onsite and remote Hours: 40.0/week Security Clearance: Public Trust Work expected to begin...
Date Posted: 07/24/2026 Recommended
-
Information Systems Security Officer
20871, Virginia
Title: Information Systems Security Officer (ISSO) Location: Clarksburg, MD (Onsite) Type: Direct Hire Compensation: $150,000/year (salary) Schedule: 40 hours/week Clearance Required: Active TS/SCI with Polygraph (required to start) Role Overview We’re...
Date Posted: 07/21/2026 Recommended
-
Information Systems Security Engineer
20871, Virginia
INFORMATION SYSTEMS SECURITY ENGINEER (ISSE) Location: Clarksburg, Maryland Work Model: Onsite Type: Direct Hire Compensation: $180,000 (salary) Schedule: 40 hours/week Clearance Required: Active TS/SCI with Polygraph (must be current) Certification Re...
Date Posted: 07/21/2026 Recommended
-
PKI Governance and Configuration Manager
Springfield, VA
Job Title: PKI Governance and Configuration Manager Location: Springfield, VA Required Security Clearance: Top Secret Responsibilities Oversee the integrity, security, and compliance of Department of State’s PKI and Credential hosting systems. Manage t...
Date Posted: 06/16/2026 Recommended
-
Information Security Vulnerability Analyst
Louisville, KY
Job Title: Information Security Vulnerability Analyst Location: Louisville, KY Job Overview System One is seeking an Information Security Vulnerability Analyst for a long-term opportunity in the Louisville, KY area. Responsibilities Monitor enterprise ...
Date Posted: 07/30/2026 Recommended
-
Governance Risk & Compliance Analyst
Lakewood, CO
Job Title: Governance Risk & Compliance Analyst Location: Lakewood, CO Work Model: Hybrid – onsite and remote Overview System One is seeking a GRC Analyst for an opportunity in Lakewood, CO. The GRC Analyst is a member of the Governance, Risk & Complia...
Date Posted: 06/17/2026 Recommended
-
Information Security Analyst
Bellevue, WA
Job Title: Information Security Analyst Location: Bellevue, WA Type: Contract Contractor Work Model: Onsite Responsibilities Support the company’s Incident Response procedures to facilitate appropriate, timely, and consistent response activities, inclu...
Date Posted: 08/03/2026 Recommended
-
Manager, Network & Cybersecurity Engineering
Tampa, Florida
Job Title: Network & Cybersecurity Engineering Location: Tampa, Florida (fully onsite) Type: Direct Hire Compensation: $140,000 - 150,000.00 (based on experience) Hours: 40.0 Job Summary: This position provides leadership for the integrated Network and...
Date Posted: 07/09/2026 Recommended
-
IT Project Coordinator
Virginia, VA
Job Title: Project Coordinator Type: Contract Compensation: 50.00-60.00/hr W2 Work Model: Remote Hours: 40.0 Security Clearance: Not specified in the job description or fields Responsibilities Support project strategy, planning, scheduling, and coordin...
Date Posted: 07/29/2026 Recommended
-
Mid-Level Cybersecurity Incident Response Analyst
Bethesda, Maryland
Job Title: Mid-Level Cybersecurity Incident Response Analyst Location: Bethesda, Maryland Type: Direct Hire Compensation: 120k Work Model: Hybrid Hours: 40.0 Security Clearance: Public Trust Responsibilities Monitor, analyze, and investigate security a...
Date Posted: 07/24/2026 Recommended
-
AWS Cloud Security Engineer
Mclean, Virginia
AWS Cloud Security Engineer Remote What You Will Do We are seeking an AWS Cloud Security Engineer to support a large-scale cloud modernization effort for a federal client. This role will focus on securing AWS environments, strengthening cloud security ...
Date Posted: 06/22/2026 Recommended
-
Linux Systems Engineer
Melbourne, FL
Job Title: Linux Systems Engineer Location: Melbourne, FL Type: Contract To Hire Work Model: Hybrid – onsite and remote Hours: 40.0 Security Clearance: Not specified Overview System One is looking for a Linux Systems Engineer in either Melbourne or Mir...
Date Posted: 07/27/2026 Recommended
-
Sr Cyber Security Engineer
Washington, DC
Job Title: Sr Cyber Security Engineer Location: Washington, DC Type: Contract Compensation: $79.55 Work Model: Hybrid Hours: 40.0 Responsibilities Install, configure, and customize SailPoint Identity IQ (IIQ) to support Governance Policies and procedur...
Date Posted: 08/03/2026 Recommended
-
Software Systems Engineer III
Huntsville, AL
Job Title: Software Systems Engineer III Location: Huntsville, AL Type: Contract - W2 only Compensation: $54.40 - $60.00 per hour Work Model: Onsite Hours: 40.0 Security Clearance: Secret Clearance (Eligibility for Secret Clearance) Overview Software S...
Date Posted: 07/08/2026 Recommended
-
Security Engineer II
Milford, DE
Job Title: Security Engineer II Location: Milford, DE Type: Direct Hire Job Summary: System One is seeking a Security Engineer II for a permanent opportunity in Milford, DE. The Security Engineer will work Technology Services to managing escalated secu...
Date Posted: 05/15/2026 Recommended
-
Risk and Compliance Systems Analyst
Vienna, VA
Job Title: Risk and Compliance Systems Analyst (Oracle ERP Fusion and RMC) Location: Vienna, VA Pay Rate: open to W2 and established 1099's Work Model: Hybrid, onsite 3 days a week Position type: multiyear contract We are looking for an Oracle ERP Fusi...
Date Posted: 07/01/2026 Recommended
-
Cyber Security Engineer III
St. Louis, Missouri
Job Title: Cyber Security Engineer Location: St. Louis, MO Work Model: Onsite Position Type: 6 Month Contract to Hire Clearance Requirement: Active TS/SCI required and ability to obtain poly Job Summary We are seeking a Cyber Security Engineer to suppo...
Date Posted: 06/04/2026 Recommended
-
Principal SDET, Cybersecurity Test Engineer
Lakewood, CO
Job Title: Principal SDET, Cybersecurity Test Engineer Location: Lakewood, CO Type: Direct Hire Job Summary: System One is seeking a Principal SDET – Cybersecurity Test Engineer for a full-time/permanent opportunity in Lakewood, CO. As a Sr. Technical ...
Date Posted: 06/03/2026 Recommended
-
Environmental Health, Safety, and Security Specialist
Dayton, NJ
Environmental Health, Safety & Security (EHSS) Specialist Location: Dayton, NJ Employment Type: Direct Hire Salary: $65,000–$80,000 annually Schedule: Monday–Friday, onsite (typically 8:00 AM–4:00 PM or 8:30 AM–5:00 PM; occasional schedule flexibility ...
Date Posted: 08/05/2026 Recommended
-
Cyber Security Engineer III
Springfield, VA
Job Title: Cyber Security Engineer Location: Springfield, VA Work Model: On site Position Type: 6 month contract to hire Clearance Requirement: Active TS/SCI with ability to obtain a polygraph System One IT is seeking a Cyber Security Engineer to suppo...
Date Posted: 06/04/2026 Recommended
-
Cloud Engineer
20171, Virginia
Job Title: Cloud Engineer Location: Herndon, Virginia Type: Direct Hire Compensation: $200,000.00 - $250,000.00 Work Model: Remote – offsite Hours: 40.0 hours per week Security Clearance: Active Secret Clearance Required Responsibilities Manage, config...
Date Posted: 07/15/2026 Recommended
-
Strategic Planning Specialist
Virginia, VA
Job Title: Strategic Planning Specialist Location: Remote Pay Rate: W2 only (no c2c) Position Type: Multiyear Contract Candidates must live in the United States. This role requires someone with 7-10 years of experience working in a PMO, Program Managem...
Date Posted: 07/30/2026 Recommended
-
Jira Platform Engineer (onsite)
Washington, District of Columbia
Jira Platform Engineer Washington, DC – onsite US citizenship required per government contact Must be able to obtain Public Trust clearance Type: Multi-Year Contract supporting Federal Reserve Board Open to W2 and C2C Must Apply before July 9th The Dev...
Date Posted: 07/06/2026 Recommended
-
AWS Cloud Platform Engineer
McLean, VA
AWS Cloud Platform Engineer 100% remote Security Clearance: U.S. citizenship or Green Card status is required, along with the ability to obtain a public trust clearance W2 employment only NO C2C Responsibilities: • Design, build, and manage scalable, s...
Date Posted: 06/23/2026 Recommended
-
Endpoint Systems Engineer
Melbourne, FL
Job Title: Endpoint Systems Engineer Location: Melbourne, FL Type: Contract To Hire Compensation: $110,000.00 - $120,000.00 Work Model: Hybrid – onsite and remote Overview As an Endpoint Systems Engineer, you will be responsible for designing, implemen...
Date Posted: 07/27/2026 Recommended
-
Endpoint Systems Engineer
Miramar, FL
Job Title: Endpoint Systems Engineer Location: Miramar, FL Type: Contract To Hire Compensation: $110,000.00 - $120,000.00 Work Model: Hybrid – onsite and remote Overview As an Endpoint Systems Engineer, you will be responsible for designing, implementi...
Date Posted: 07/27/2026 Recommended
-
Network Administrator
Bethesda, Virginia
Network Administer Bethesda, VA Onsite Hours: 40.0 Responsibilities Support the network infrastructure for LAN/WAN services at the National Institutes of Health (NIH). Coordinate work actions and collaborate with the CIT federal team and other service ...
Date Posted: 07/23/2026 Recommended
-
Senior Platform Engineer
Washington, DC
Senior Platform Engineer Washington, DC – onsite US citizenship required per government contact Must be able to obtain Public Trust clearance Type: Multi-Year Contract supporting Federal Reserve Board Open to W2 and C2C Deadline to apply: June 29th Joi...
Date Posted: 06/15/2026 Recommended
-
Cyber Threat Intelligence Analyst
35801, Alabama
Cyber Threat Intelligence Analyst Onsite- Huntsville, Alabama Required: Top Secret with the ability to sit for the CI Poly Responsibilities Monitor and analyze cyber threats, investigate security breaches, and produce reports to enhance cybersecurity p...
Date Posted: 07/28/2026 Recommended