The Opportunity

•
Own the
day-to-day security authorization posture of assigned DoD information systems

•
Work within a
well-resourced team with dedicated engineering, operations, and architecture
support

•
Develop expertise
in modern RMF tooling including eMASS and eMASSer automation

•
Directly support
mission continuity by managing ATO packages and continuous monitoring programs

•
Grow into a
senior GRC role with clear advancement pathways

Responsibilities

•
Develop,
maintain, and update System Security Plans (SSPs) for assigned systems

•
Manage POA&Ms
from identification through remediation and closure

•
Compile and
submit Authorization to Operate (ATO) packages

•
Conduct
continuous monitoring activities per established strategy

•
Utilize eMASS for
GRC management and RMF workflow tracking

•
Coordinate with
ISSEs and SecOps to validate control implementations

•
Develop Security
Assessment Plans (SAPs) and support SAR coordination

•
Draft supply
chain risk management plans

•
Support the
Cybersecurity Architect with RMF strategic planning

Qualifications

Required:

•
Active Secret or
TS clearance

•
3–5 years of
RMF/ATO experience within DoD or federal environments

•
Hands-on
experience with eMASS

•
Working knowledge
of NIST SP 800-53r5 and DoD RMF processes

•
Demonstrated
ability to independently author SSPs and manage POA&Ms

Required Certification:

•
DoD 8140.03M DCWF
Basic tier certification — CEH

Desired Certification:

•
DoD 8140.03M DCWF
Intermediate tier certification — one of: CEH(P), RCCE Level 1, Cloud+, CPTE,
FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+

Required Education:

•
DoD 8140 Interim
Education Options

Desired Education:

•
Bachelor’s degree
in Computer Science, Cybersecurity, Data Science, Information Systems,
Information Technology, or Software Engineering

Desired:

•
Experience with
eMASSer or similar RMF automation tooling

•
Exposure to
cloud-hosted or hybrid system authorization boundaries

•
Familiarity with
the DoD RMF Knowledge Service