CASP+ (CompTIA SecurityX) or equivalent certification required.
Minimum of five years in RMF lifecycle reporting and software/hardware reconciliation.
Experience managing networks on Windows, Linux, and Apple platforms in both unclassified and classified environments.
Active Secret security clearance with a favorably adjudicated Type 3 investigation required.
Must meet DoD certification requirements at award.
Responsibilities
Support RMF system categorization and security-control selection.
Prepare and maintain RMF lifecycle documentation for ATO decisions.
Assist with Security Control Assessor visits and remediation responses.
Conduct continuous security-control monitoring and vulnerability management activities.
Review hardware/software changes for cybersecurity impacts and support configuration management.
Analyze defect reports and validate tracking records.
Support software baseline requirements and emerging technology evaluations.
Benefits
On-site cybersecurity engineering support.
Opportunity to work with advanced information systems.
Engagement with DoD Risk Management Framework processes.
Collaboration with Security Control Assessors and technical control boards.
Involvement in continuous monitoring and vulnerability management.
Full Job Description
POSITION SUMMARY
Provide on-site cybersecurity engineering and DoD Risk Management Framework (RMF) support for Aberdeen Test Center (ATC) information systems, including the ATC LAN, Logically Isolated Network, Secure Test Environment, and Test and Evaluation Network. Help establish, sustain, and continuously monitor system authorizations to operate (ATOs).
PRIMARY RESPONSIBILITIES
Support RMF system categorization, boundary identification, security-control selection, implementation, and assessment.
Prepare, update, and maintain RMF lifecycle documentation and supporting evidence for ATO decisions and ongoing authorization.
Support Security Control Assessor (SCA) visits, reviews, validation activities, and remediation responses.
Perform continuous security-control monitoring, Plan of Action and Milestones (POA&M) maintenance, and information assurance vulnerability management (IAVM) activities.
Review changes to hardware/software baselines, assess cybersecurity impacts and interoperability, and support configuration-management and technical control boards.
Analyze defect/incident reports; validate tracking records and reconcile relevant software and hardware information.
Support software baseline requirements, system architecture, emerging technology evaluations, and capability migrations.
MANDATORY QUALIFICATIONS
CASP+ (now called CompTIA SecurityX) or an equivalent certification accepted under the solicitation.
At least five years supporting RMF lifecycle reporting and software/hardware reconciliation.
Experience managing networks across Windows, Linux, and Apple platforms and in unclassified/classified (including Secret) environments.
Active Secret personnel security clearance, with favorably adjudicated Type 3 investigation, at bid submission; ability to maintain assigned SIPRNet access.
Meet applicable DoDD 8140.01, DoD 8570.01-M, DFARS [redacted], and AR 25-2 baseline certification requirements at award.
