Job description
The Opportunity
- Own the day-to-day security authorization posture of assigned DoD information systems
- Work within a well-resourced team with dedicated engineering, operations, and architecture support
- Develop expertise in modern RMF tooling including eMASS and eMASSer automation
- Directly support mission continuity by managing ATO packages and continuous monitoring programs
- Grow into a senior GRC role with clear advancement pathways Responsibilities
- Develop, maintain, and update System Security Plans (SSPs) for assigned systems
- Manage POA&Ms from identification through remediation and closure
- Compile and submit Authorization to Operate (ATO) packages
- Conduct continuous monitoring activities per established strategy
- Utilize eMASS for GRC management and RMF workflow tracking
- Coordinate with ISSEs and Sec. Ops to validate control implementations
- Develop Security Assessment Plans (SAPs) and support SAR coordination
- Draft supply chain risk management plans
- Support the Cybersecurity Architect with RMF strategic planning Qualifications Required:
- Active Secret or TS clearance
- 3–5 years of RMF/ATO experience within DoD or federal environments
- Hands-on experience with eMASS
- Working knowledge of NIST SP 800-53r5 and DoD RMF processes
- Demonstrated ability to independently author SSPs and manage POA&Ms Required Certification:
- DoD 8140.03M DCWF Basic tier certification — CEH Desired Certification:
- DoD 8140.03M DCWF Intermediate tier certification — one of: CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, Pen. Test+, or Security+ Required Education:
- DoD 8140 Interim Education Options Desired Education:
- Bachelor’s degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering Desired:
- Experience with eMASSer or similar RMF automation tooling
- Exposure to cloud-hosted or hybrid system authorization boundaries
- Familiarity with the DoD RMF Knowledge Service