Job Requirements
Chantilly, VA
Top Secret/SCI CI Polygraph
Mid Level Career (5+ yrs experience)
$190,000 - $210,000
Job Description
RMF Execution & Compliance
Security Control Implementation & Assessment
Cybersecurity Tools & Technologies
Continuous Monitoring & Risk Management
Collaboration & Stakeholder Engagement
Required:
Desired:
- Lead and support all phases of the Risk Management Framework (RMF) process in accordance with NIST SP 800-37 and related standards.
- Develop, maintain, and update RMF documentation including:
- System Security Plans (SSPs)
- Security Assessment Reports (SARs)
- Plans of Action and Milestones (POA&Ms)
- Continuous Monitoring Strategies
- Coordinate security authorization packages for Authorization to Operate (ATO) decisions.
Security Control Implementation & Assessment
- Apply and validate security controls based on NIST SP 800-53 and organizational overlays.
- Conduct control assessments and support independent security assessments and audits.
- Identify security gaps and recommend remediation actions.
Cybersecurity Tools & Technologies
- Familiarity with current Information Assurance (IA) and cybersecurity tools such as vulnerability management and scanning tools
- Interpret scan results and drive remediation efforts with system owners and engineers.
Continuous Monitoring & Risk Management
- Support continuous monitoring programs to ensure ongoing compliance with security controls.
- Track vulnerabilities, risks, and mitigation progress through POA&M management.
- Provide risk-based recommendations to system owners and Authorizing Officials (AOs).
Collaboration & Stakeholder Engagement
- Work closely with system engineers, network administrators, program managers, and security leadership.
- Participate in security working groups, technical reviews, and compliance audits.
- Communicate security posture and risk status to technical and non-technical stakeholders.
Required:
- An active TS/SCI with a current CI Polygraph (preferably from this client) is required to be considered for the role.
- BS in Computer Science, Cyber Security, or related field.
- Demonstrated hands-on experience executing the RMF lifecycle (all or most phases).
- Experience and/or understanding of the Software Development Lifecycle (SDLC)
- Current, active security certification such as:
- CompTIA Security+,
- CISSP (Certified Information Systems Security Professional),
- CISM (Certified Information Security Manager),
- CIAM (Certified Identity and Access Manager),
- CCSP (Certified Cloud Security Professional).
- Familiarity with federal cybersecurity compliance environments.
- Ability to operate independently and contribute immediately upon assignment.
Desired:
- Master's Degree in Computer Science or Cyber Security.
- Experience with cloud security RMF (e.g., AWS GovCloud, Azure Government).
- Strong analytical, documentation, and communication skills.
- Prior experience supporting ATO packages in enterprise environments.
group id: 10304679
