ZipRecruiter

Log In

1

Rmf Analyst Jobs in Texas (NOW HIRING)

TekSynap

Cyber Analyst

San Antonio, TX · On-site

$150 - $200/hr

Review and validate RMF artifacts for completeness, accuracy, and compliance prior to submission to Authorizing Officials (AO), Security Control Assessors (SCA), and cybersecurity review boards.

TekSynap

Cyber Analyst

San Antonio, TX · On-site

Review and validate RMF artifacts for completeness, accuracy, and compliance prior to submission to Authorizing Officials (AO), Security Control Assessors (SCA), and cybersecurity review boards.

TekSynap

Cyber Analyst

San Antonio, TX · Hybrid

Review and validate RMF artifacts for completeness, accuracy, and compliance prior to submission to Authorizing Officials (AO), Security Control Assessors (SCA), and cybersecurity review boards.

TekSynap

Cyber Analyst

San Antonio, TX · Hybrid

Review and validate RMF artifacts for completeness, accuracy, and compliance prior to submission to Authorizing Officials (AO), Security Control Assessors (SCA), and cybersecurity review boards.

TekSynap

Cyber Analyst

San Antonio, TX · Hybrid

Overview We are seeking a Cybersecurity Analyst to support Risk Management Framework (RMF) activities and security authorization efforts for Department of War (DoW) information systems. This role is ...

Booz Allen Hamilton

ISSO Security Analyst

Stafford, TX · On-site

$150 - $200/hr

Experience supporting all RMF steps, security categorizations, creating and updating security ... Experience analyzing authorization documents and associated artifacts against authorization ...

next page

Showing results 1-20

All JobsRmf Analyst JobsRmf Analyst Jobs in Texas

Rmf Analyst information

See Texas salary details

$36.8K

$100K

$131.4K

How much do rmf analyst jobs pay per year?

As of Sep 8, 2026, the average yearly pay for rmf analyst in Texas is $99,998.00, according to ZipRecruiter salary data. Most workers in this role earn between $85,200.00 and $121,100.00 per year, depending on experience, location, and employer.

What is an RMF analyst?

An RMF (Risk Management Framework) Analyst is responsible for ensuring IT systems comply with security regulations and frameworks, such as NIST 800-53. They assess risks, implement security controls, and help organizations maintain authorization to operate (ATO) for their systems. RMF Analysts work closely with security teams, auditors, and system owners to document risks and remediation efforts. Their role is crucial in maintaining cybersecurity compliance for government and private-sector organizations handling sensitive data.

What are the typical daily responsibilities of an RMF analyst?

As an RMF Analyst, your daily responsibilities often include conducting security assessments, preparing documentation to support system accreditation, reviewing compliance with information security policies, and coordinating with system owners to address security risks. You may also be responsible for monitoring ongoing system changes, updating risk assessment reports, and supporting remediation activities based on audit findings. Most RMF Analysts work as part of a cybersecurity or compliance team, collaborating closely with IT personnel, auditors, and management to maintain a secure organizational environment. The work requires a mix of independent analysis and team-oriented problem-solving, making communication and attention to detail key to your success.

What are the key skills and qualifications needed to thrive in the RMF analyst position, and why are they important?

To thrive as an RMF Analyst, you need a thorough understanding of the Risk Management Framework (RMF), information security policies, and federal compliance standards such as NIST SP 800-53. Familiarity with security assessment tools, vulnerability scanning software, and certifications like CompTIA Security+ or CISSP are highly valued. Strong analytical thinking, attention to detail, and clear written and verbal communication are important soft skills in this position. These abilities are crucial for accurately evaluating security risks, maintaining regulatory compliance, and effectively collaborating with both technical and non-technical stakeholders.

What does an RMF analyst do?

An RMF analyst is responsible for implementing and managing the Risk Management Framework (RMF) to ensure the security of information systems. They assess security controls, conduct risk assessments, and prepare documentation to meet compliance standards, often using tools like NIST guidelines. This role requires knowledge of cybersecurity principles and attention to detail to protect organizational assets.

What are popular job titles related to Rmf Analyst jobs in Texas?

For Rmf Analyst jobs in Texas, the most frequently searched job titles are:

What job categories do people searching Rmf Analyst jobs in Texas look for?

The top searched job categories for Rmf Analyst jobs in Texas are:

Rmf Analyst jobs near you
Infographic showing various Rmf Analyst job openings in Texas as of September 2026, with employment types broken down into 100% Full Time. Highlights an 84% In-person, and 16% Remote job distribution, with an average salary of $99,998 per year, or $48.1 per hour.

RMF Analyst- AFMETS

Semper Valens Solutions

Canyon Lake, TX • On-site

Full-time

Posted 15 days ago

Job description

RMF Analyst
Full Time, Remote, San Antonio, TX area
Secret Clearance
**This position is contingent upon contract award**
Overview:
Semper Valens Solutions is seeking a detail-oriented RMF Analyst to support the assessment, authorization, and continuous monitoring of information systems in accordance with the NIST Risk Management Framework (RMF) and applicable federal cybersecurity guidelines (NIST SP 800-37, 800-53, 800-53A, FISMA, DoD 8510.01, and CNSSI 1253, as applicable). This role is critical to ensuring organizational systems achieve and maintain an Authorization to Operate (ATO) by supporting security categorization, control selection, implementation, assessment, and continuous monitoring activities throughout the system lifecycle.
Key Responsibilities
  • Support execution of the RMF process across all six steps: Categorize, Select, Implement, Assess, Authorize, and Monitor
  • Develop, review, and maintain security authorization documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and Risk Assessment Reports (RARs)
  • Conduct security control assessments against NIST SP 800-53/800-53A control baselines and document findings
  • Perform security categorization of information systems using FIPS 199/200 and NIST SP 800-60
  • Coordinate with system owners, ISSOs, and ISSMs to identify, track, and remediate security vulnerabilities and control deficiencies
  • Support continuous monitoring activities, including periodic control assessments, vulnerability scanning review, and configuration compliance checks
  • Assist in the preparation and submission of Authorization to Operate (ATO), Interim ATO (IATO), and Authorization to Test (ATT) packages
  • Utilize GRC tools (e.g., eMASS, Xacta, CSAM, Archer) to manage authorization packages and track compliance status
  • Review and analyze security assessment results, audit logs, and scan reports (e.g., ACAS/Nessus, STIG checklists) to identify risks
  • Support development and tracking of POA&Ms, ensuring timely remediation of identified weaknesses
  • Ensure compliance with applicable frameworks, including FISMA, DoD RMF, CNSSI 1253, and agency-specific cybersecurity policies
  • Prepare risk briefings and status reports for leadership, Authorizing Officials (AOs), and government stakeholders
  • Stay current on evolving NIST guidance, DoD/agency policy updates, and emerging cybersecurity threats affecting authorization requirements

Required Qualifications
  • Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or related field (or equivalent experience)
  • 3+ years of experience supporting RMF, C&A/A&A processes within federal, DoD, or Intelligence Community environments
  • Working knowledge of NIST SP 800-37, 800-53, 800-53A, 800-60, and FIPS 199/200
  • Experience developing or reviewing SSPs, SARs, POA&Ms, and RAR documentation
  • Familiarity with DoD or agency-specific implementation guides (e.g., DoDI 8510.01, ICD 503, CNSSI 1253)
  • Hands-on experience with GRC/eMASS or equivalent RMF tracking tools
  • Understanding of vulnerability management and STIG/SCAP compliance processes
  • Active DoD 8570/8140-compliant certification (e.g., Security+, CySA+, or equivalent) - required or attainable within 6 months of hire
  • Strong written communication skills for technical documentation and stakeholder reporting
  • U.S. Citizenship required; active security clearance or eligibility to obtain one, per position requirements

Preferred Qualifications
  • Active Secret clearance
  • CISSP, CAP (Certified Authorization Professional), or CISM certification
  • Experience with cloud authorization processes (FedRAMP, DoD Cloud Computing SRG)
  • Familiarity with vulnerability scanning tools (ACAS/Nessus, Tenable) and SCAP compliance checkers
  • Experience supporting Cybersecurity Service Provider (CSSP) or SOC operations
  • Knowledge of Zero Trust Architecture principles and their application to RMF
  • Experience working within Intelligence Community (IC) or Defense Industrial Base (DIB) environments

About Semper Valens Solutions:
Semper Valens Solutions, Inc. (SVS) is a Service-Disabled Veteran Owned Small Business (SDVOSB) providing Cost Effective Software and Systems Engineering, Field Support, Training and Full Life cycle Support Management to the DOD and VA community.
At Semper Valens, our vision is to remain a creative, cutting edge and cost-effective solutions provider where our shared intellect, industry experience, and technology excellence, make a positive difference in our customer's success. Our solutions help bridge the gap between IT and business prioritizations to optimize budgets, risks and operational processes.
We search for outstanding technical professionals, hiring at all levels of the experience spectrum; intermediate, journeyman and senior. Consider us for your career plan.
Semper Valens Solutions is an Equal Opportunity Employer
Semper Valens Solutions proactively fulfills its role as an equal opportunity employer. We do not discriminate against any employee or applicant for employment because of race, color, sex, religion, age, sexual orientation, gender identity and expression, national origin, marital/parental status, pregnancy/childbirth, or related conditions, physical or mental disability, genetic information, status as a Disabled Veteran, Recently Separated Veteran, Active-Duty Wartime or Campaign Badge Veteran, Armed Forces Services Medal, or any other characteristic protected by law.
If you require a reasonable accommodation to apply for a position with Semper Valens Solutions through its online applicant system, please contact Semper Valens Solutions Human Resources Department at (830) 899-6870.
Semper Valens Solutions is an affirmative action/equal opportunity employer - minorities, females, disabled, and protected veterans are urged to apply. Applicants have rights under Federal Employment Laws.
All Jobs at Semper Valens Solutions:

Apply