Qualifications

• Bachelor's degree plus 5 years of relevant experience or equivalent.
• Active or current TS/SCI clearance required.
• Must hold DoD 8570 IAT II+ certification (Security+, CySA+, CISSP, etc.).
• Demonstrated hands-on experience with RMF, POA&M, and ATO documentation processes.
• Experience utilizing ACAS and IAVM for vulnerability tracking.
• Solid understanding of STIG compliance, patch management, and system hardening techniques.
• Familiarity with NIST publications and incident response methodologies.

Responsibilities

• Execute RMF processes for Assessment & Authorization (A&A).
• Develop and maintain system security plans (SSPs), POA&Ms, SARs, and ATO artifacts in XACTA/eMASS.
• Conduct vulnerability scans and track remediation efforts using ACAS/IAVM.
• Implement and validate security controls based on NIST 800-53 and CNSSI 1253 standards.
• Support the hardening, patching, and STIG compliance of both Windows and Linux systems as well as network devices.
• Monitor security systems and assist with incident response activities.
• Evaluate the security impact of changes to systems and applications.
• Collaborate with engineering, administration, and DevSecOps teams on security integrations.

Benefits

• Opportunity to work on critical DoD and Intelligence Community missions.
• Engagement with cutting-edge cybersecurity practices and technologies.
• Exposure to a collaborative work environment with engineering and DevSecOps teams.
• Possibility of leveraging scripting and Agile tools for improved workflows.
• Access to professional development opportunities in a specialized field.