Work Location: Building 3190, Naval Base Guam (NBG), Santa Rita, Guam 96915
Position Overview
We are seeking a Systems Security Analyst to support our client. You will help protect the confidentiality, integrity, and availability of Facility-Related Control Systems by leading security engineering, Risk Management Framework (RMF), vulnerability management, continuous monitoring, and incident response activities. This is a mission-essential, hands-on role for a security professional who can work independently, coordinate across technical and government stakeholders, and turn complex compliance requirements into operational results.
Key Responsibilities:
- Drive the end-to-end RMF lifecycle (Steps 1-6) in accordance with current Department of the Navy and NAVFAC Echelon II guidance; verify artifacts for completeness, quality, and compliance and maintain accurate eMASS packages.
- Achieve, maintain, and track Authorities to Operate (ATOs) for FRCS; support annual security reviews and prepare Memorandums for Record for approved baseline changes.
- Develop and maintain security policies, standard operating procedures, and implementation plans mapped to applicable NIST SP 800-53 control families and tailored to the FRCS environment.
- Execute vulnerability and compliance assessments using approved DoN tools such as ACAS, SCAP, and Evaluate STIG; complete manual STIG/SRG validations and maintain .ckl/.cklb checklists.
- Prepare Security Center and eMASSter reports for eMASS integration and ensure vulnerability results are accurately uploaded and maintained in VRAM.
- Sustain system-level continuous monitoring through recurring scans, audit-log analysis, remediation tracking, mitigation, and quarterly POA&M updates.
- Coordinate and support on-site RMF Step 4 validation, including evidence collection and collaboration with system owners and independent validators.
- Serve as a technical representative and/or Configuration Management Officer on the Configuration Control Board, providing security-impact analyses and risk assessments for proposed FRCS baseline changes.
- Support cyber incident response as a member of the MAR Cyber Emergency Response Team, including participation in an on-call rotation and preparation of operational logs and after-action reports.
- Provide bi-weekly RMF status reports to the ISSM, maintain project records in Maximo and/or eProjects, and contribute to monthly status reporting.
Required Qualifications
- Must be a US Citizen
- Must hold Secret Clearance
- Minimum of five years of RMF experience, including at least one year of specialized experience supporting FRCS RMF and cybersecurity engineering activities
- At least one current qualifying certification: CCSP, Cloud+, GICSP, GISF, GSEC, or Security+, RCCE Level 1, CISSO, CISSP-ISSEP, CySA+, FITSP-O, GCLD, GCSA, GSNA.
Magnus Management Group LLC is an ISO 9001, ISO 27001, ISO 20000, ISO56002 and CMMI Level 3 (SVC) + SSD certified, and agile Highly Adaptive Cybersecurity Services (HACS) qualified Woman Owned Small Business (WOSB) as evaluated by US General Services Administration (GSA) cyber Subject Matter Experts (SMEs). Our experience and investments in quality and certification of our expertise has refined our mission support, information technology, information management, management consulting and cybersecurity solutions by supporting highly complex Information Technology (IT) environments.
