Senior Cybersecurity Internal Controls Engineer (RMF/eMASS)Radford, VAPosition Summary: You will provide full cybersecurity internal controls and Risk Management Framework (RMF) support under DoDI 8500.01 and DoDI 8510.01, including enterprise eMASS and RMF services.
Key Responsibilities:- Build RMF packages and maintain asset lists and categorizations
- Schedule and coordinate system validation reviews
- Produce artifacts that show control compliance
- Review ACAS and STIG reports and coordinate fixes
- Create, track, and maintain POA&Ms
- Run annual security reviews and take part in COOP and incident response testing
- Maintain Ports, Protocols, and Services Management (PPSM) and circuit registry records
- Take part in software assurance reviews and make sure findings are recorded in eMASS
Required Qualifications:- Cybersecurity certification (e.g., CISSP)
- Active Security Clearance Required
- 10+ years in cybersecurity and RMF-related work
- Extensive experience with enterprise eMASS and RMF services
- Skill in building RMF packages and maintaining asset lists and categorizations
- Ability to schedule and coordinate system validation reviews
- Experience producing control compliance artifacts
- Knowledge of ACAS and STIG reports and coordinating fixes
- Experience creating, tracking, and maintaining POA&Ms
- Ability to run annual security reviews
- Experience with COOP and incident response testing
- Ability to maintain PPSM and circuit registry records
- Experience with software assurance reviews and recording items in eMASS POA&Ms
- Experience with security compliance and control documentation
Preferred Qualifications:- Bachelor's degree in computer science or equivalent experience
- Familiarity with DoDI 8500.01 and DoDI 8510.01
- Strong analytical, problem-solving, communication, and coordination skills
- Experience with DoD enterprise monitoring tools and practices
- Incident response experience
- Understanding of COOP and communication plans
- Ability to work well on a team and with many stakeholders
Education: Bachelor's degree or equivalent experience preferred.
Certifications: CISSP or equivalent.
