Cybersecurity Analyst

Summary

TIAG is hiring a Cybersecurity Analyst to support the Uniform Services University of Health Sciences in modernizing Authorization to Operate packages for enterprise platforms. The role supports the full RMF lifecycle, including developing authorization documentation, validating technical controls, managing POA&Ms, and preparing artifacts for eMASS and ServiceNow GRC.

Responsibilities

• Provide comprehensive support across the full RMF lifecycle, driving the ATO modernization process from initial gap analysis through final package validation and closeout recommendations
• Create and modernize complete RMF authorization packages, which must include the System Security Plan (SSP), Security Assessment Report (SAR), Plan of Action and Milestones (POA&M), and Continuous Monitoring Plan
• Draft and refine implementation-specific control narratives (answering controls) to ensure they accurately reflect the system's actual configuration, directly replacing generic baseline statements
• Develop, document, and manage POA&Ms for any control gaps identified during technical discovery that require future remediation
• Prepare all required fields, supporting documentation, artifacts, and attachments to support eMASS readiness and Government upload
• Upload and map artifacts, technical evidence, control responsibilities, and POA&M information to individual Control Objectives within the ServiceNow GRC Policy and Compliance module
• Evaluate Cloud Service Provider FedRAMP packages to determine control inheritance, tailoring the baseline to reflect local Agency implementation, shared responsibilities, and DoD IL-4 requirements
• Perform 100% Human-in-the-Loop (HitL) validation on all AI-assisted technical content to ensure narratives accurately address Rev 5 controls and contain no unsupported technical statements
• Document organizational tuning decisions in coordination with system stakeholders, capturing risk acceptances, organizational overrides, compensatory mitigations, and tool-specific authorizations

Skills

• Active DoD Secret clearance required
• Strong technical validation skills to ensure control narratives align with actual system realities rather than generic baseline statements

Qualifications

Must Haves

• Active DoD Secret clearance required
• Strong technical validation skills to ensure control narratives align with actual system realities rather than generic baseline statements

Benefits

• Fully remote