Join a Mission That Matters

Clark Creative Solutions (CCS) is seeking a SOC Analyst / RMF Support Specialist to support a government DoD client in California, Guam, and Japan. This role is ideal for a cybersecurity professional who can drive Authorization to Operate (ATO) outcomes by building and maintaining RMF packages, coordinating with enterprise stakeholders, and supporting continuous monitoring activities in high-availability operational environments.

Clark Creative Solutions (CCS) is a certified 8A, Service-Disabled company. Our company’s expertise are in the areas of intelligence, acquisition, logistical support, IT solutions and various personnel support services.

Our commitment to professionalism is demonstrated by our daily work ethic. CCS is wherever we need to be to get the results you desire.

​

What You’ll Do:

​

• Provide on-site Risk Management Framework (RMF) support for a DoD client in Guam, including regular progress reporting to the ISSM, HQ teams, and leadership across the enterprise.

• Develop new RMF artifacts and update existing documentation to support new ATOs, ongoing ATO maintenance, and reauthorization efforts.

• Produce and maintain RMF documentation, including (but not limited to):

  • Hardware and Software Lists

  • Network diagrams (IAW NAVFAC FRCS Diagram Requirements Job Aid)

  • Ports, Protocols, and Services Management (PPSM) forms

  • Categorization forms

  • Cybersafe Grading Checklists

  • Criticality Analysis Checklist (as applicable)

  • Security Plan (SP) and Security Assessment Plan (SAP)

  • System-specific policies aligned to NIST 800-53 control families

  • Implementation and System Level Continuous Monitoring (SLCM) Plans

  • Raw vulnerability scan outputs and Security Center generated reports

  • Manual STIG/SRG checklists (CKLs)

• Perform all tasks required to support RMF packages in eMASS, including uploading artifacts in proper format and executing workflow steps to support authorization decisions.

• Implement security controls aligned to STIGs/SRGs, remediate findings, and support continuous monitoring by:

  • Patching vulnerabilities on IT/network devices and IP-based controllers

  • Conducting vulnerability scans across IP-based assets and producing reports

  • Completing manual STIG checklists (CKLs) per the approved SAP

  • Maintaining and updating POA&Ms, mapping vulnerabilities to controls, and inputting/uploading test results and scan results in eMASS

• Provide on-site validation support and facilitate change requests and authorization boundary updates in coordination with the Operational Technology Design Authority (OTDA).

• Collaborate across multiple departments to coordinate scanning and patching efforts; support intermittent nationwide travel based on site requirements and availability.

 

What You Bring:

​

• Bachelor’s degree in IT/Cybersecurity (preferred).

• 3+ years of related experience and/or training (military or civilian).

• Demonstrated ability to support and sustain RMF/ATO documentation and workflows (including eMASS).

• Strong problem-solving skills, attention to detail, and the ability to produce accurate, audit-ready artifacts under deadlines.

• Proficiency with Microsoft Office (Word, Excel, PowerPoint, Outlook).

Preferred Skills:

​

• Hands-on experience implementing STIGs and SRGs, including CKL completion and validation.

• Experience conducting ACAS scans and generating deliverable-ready reports.

• Familiarity with industrial communication protocols and operational technology environments.

• Knowledge of:

  • HVAC systems equipment and operation

  • HVAC control systems

  • Utility information systems and energy-management technologies

 

Why Join Us

When you join this team, you’re not just doing a job, you’re contributing to programs that protect service members and civilians alike. You’ll gain access to experienced mentors, impactful projects, and opportunities to grow your expertise in program analysis and defense acquisition.

​

Clark Creative Solutions, LLC is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.​​​​​​