BS in Computer Science, Cyber Security, or a related field
Active TS clearance with SCI eligibility
Experience with the Risk Management Framework (RMF)
Familiarity with NIST SP 800-37, 800-53, 800-53A, and CNSSI 1253
Experience in cybersecurity risk and vulnerability assessments
Ability to develop System Security Plans (SSPs) and related documentation
Strong technical writing and communication skills
Responsibilities
Identify and mitigate cybersecurity risks to information systems
Support the RMF lifecycle, including system categorization and continuous monitoring
Conduct security control assessments using NIST SP 800-53A
Develop and maintain System Security Plans (SSPs) and Security Assessment Reports (SARs)
Apply security engineering principles throughout the system lifecycle
Coordinate with system owners and security managers for compliance and monitoring
Benefits
Opportunity to work on critical national security projects
Engagement with cutting-edge cybersecurity practices
Collaboration with experienced technical teams
Potential for professional development and training
Supportive work environment focused on security excellence
Full Job Description
Security Risk Threat Specialist III
Wright-Patterson AFB
*This position is contingent upon contract award and the actual job description may vary based on specific contract requirements and organizational needs.*
Responsibilities:
Identify, assess, and mitigate cybersecurity risks to information systems, including conducting supply chain risk assessments; develop risk mitigation plans and recommend security controls aligned with organizational needs.
Support the Risk Management Framework (RMF) lifecycle, including system categorization, security control selection and implementation, assessment, authorization, and continuous monitoring in accordance with NIST SP 800-37 and applicable organizational policies.
Conduct security control assessments using NIST SP 800-53A, including vulnerability scanning, documentation reviews, system configuration analysis, audit log examination, and penetration testing when required.
Develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting authorization documentation; track remediation actions and report unresolved risks.
Apply security engineering principles throughout the system lifecycle in accordance with NIST SP 800-160, NIST SP 800-53, and CNSSI 1253; collaborate with technical teams to implement and validate security controls.
Coordinate with system owners, Information System Security Managers (ISSMs), and Authorizing Official representatives to support continuous monitoring, communicate assessment findings and authorization status, and address cybersecurity compliance concerns.
Requirements:
BS in Computer Science, Cyber Security, or a related field
Active TS clearance with SCI eligibility
Experience supporting the Risk Management Framework (RMF), including security control implementation, assessment, authorization, and continuous monitoring.
Working knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, applicable organizational security policies, and CNSSI 1253.
Experience conducting cybersecurity risk and vulnerability assessments, analyzing system configurations and audit logs, and recommending risk mitigation measures.
Ability to develop and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting authorization documentation.
Knowledge of system security engineering principles and their application throughout the system lifecycle, including NIST SP 800-160.
Strong technical writing and communication skills, with the ability to coordinate security findings, remediation actions, and authorization status with system owners, ISSMs, and technical teams.
