Cybersecurity Specialist 4

Support the modernization and expansion of mission-critical cybersecurity capabilities by leading Risk Management Framework (RMF) activities, Assessment & Authorization (A&A) efforts, and enterprise cybersecurity compliance initiatives. Join a collaborative engineering team responsible for securing classified systems through continuous monitoring, vulnerability management, security control implementation, and accreditation support while ensuring compliance with DoD cybersecurity standards.

• Lead Risk Management Framework (RMF) activities supporting the authorization and continuous monitoring of classified information systems.
• Develop, maintain, and manage RMF Body of Evidence (BoE) documentation including System Security Plans (SSPs), Security Controls Traceability Matrices (SCTMs), Plan of Action & Milestones (POA&Ms), Security Assessment documentation, and supporting authorization artifacts.
• Maintain accreditation packages within Enterprise Mission Assurance Support Service (eMASS), ensuring system documentation remains accurate, complete, and audit-ready.
• Coordinate with government Authorizing Officials (AOs), Information System Security Managers (ISSMs), cybersecurity engineers, and program leadership to achieve and maintain Authority to Operate (ATO).
• Install, configure, integrate, and troubleshoot enterprise cybersecurity tools supporting secure system operations and continuous monitoring.
• Develop cybersecurity policies, standard operating procedures, and process improvements that strengthen program security posture and operational efficiency.
• Perform security control assessments and verification activities to ensure compliance with NIST, DoD, and organizational cybersecurity requirements.
• Identify, document, and track cybersecurity vulnerabilities and deficiencies through Plan of Action & Milestones (POA&M) management while coordinating remediation efforts across engineering teams.
• Support identity and access management solutions, Public Key Infrastructure (PKI), cryptographic implementations, and secure authentication technologies.
• Maintain secure repositories of RMF documentation and ensure controlled access to sensitive cybersecurity artifacts.
• Provide cybersecurity subject matter expertise to engineering teams, project managers, and government stakeholders throughout the system development lifecycle.
• Support continuous improvement initiatives by evaluating emerging cybersecurity technologies, security tools, and compliance processes.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related STEM (Science, Technology, Engineering, or Mathematics) discipline and 9 years of related experience.
• Four additional years of relevant cybersecurity experience may be substituted in lieu of a degree.
• Minimum 5 years of hands-on cybersecurity experience supporting classified or enterprise information systems.
• Active Top Secret security clearance with SCI eligibility and the ability to obtain and maintain TS/SCI access.
• Experience supporting the DoD Risk Management Framework (RMF) lifecycle and Authority to Operate (ATO) activities.
• Experience developing and maintaining RMF Body of Evidence documentation.
• Experience administering accreditation packages using eMASS.
• Experience developing and maintaining Plan of Action & Milestones (POA&M) documentation.
• Strong technical writing and documentation skills supporting cybersecurity compliance.
• Experience collaborating with internal engineering teams and external government oversight organizations.

• Strong analytical, organizational, and project management skills.

• Current DoD 8570 IAT Level II certification or Cybersecurity Service Provider (CSSP) certification.
• Experience integrating and administering Linux and Windows systems within virtualized environments.
• Experience installing and managing Enterprise Security Systems (ESS) and Assured Compliance Assessment Solution (ACAS).
• Experience performing SCAP compliance scanning and Security Technical Implementation Guide (STIG) validation using STIG Viewer.
• Experience implementing STIGs and security controls across classified military environments.
• Experience securing enterprise technologies including:
• Firewalls
• Router Access Control Lists (ACLs)
• Public Key Infrastructure (PKI)
• Identity and Access Management (IAM)
• Virtualization platforms
• Secure scripting and automation
• OWASP secure development practices
• Experience performing Static Code Analysis using tools such as Fortify.
• Experience supporting cybersecurity modernization initiatives within Department of Defense or other federal programs.

• Premium Health, Dental & Vision Insurance
• 401(k) with 6% Company Match
• Flexible PTO & Work Schedule
• Education & Certification Reimbursement
• Support for Military Leave
• Work-Life Balance & Traditional Family Values

Caribou Thunder is a HUBZone-certified small business providing advanced technical and engineering services to the U.S. Department of War and its mission partners.

35+ states and 20+ countries.

We’ve delivered trusted solutions for over two decades-strengthening national readiness across missions on land, undersea, in the air, and throughout LEO, MEO, GEO, and deep space.

• Employee Advocacy
• Mission Proven
• Global Reach
• Skilled Teams
• Modern Tools
• Empowering Culture

Our engineers and innovators ensure capability from sea floor to space frontier-delivering on time, maintaining compliance, and performing with precision in high-consequence environments.

We specialize in Engineering Services, Cybersecurity, Software Development, Modeling & Simulation, Digital Engineering, Artificial Intelligence, and Secure Mission Systems-disciplines powering the nation’s most complex technical missions.

Our people are the heart of Caribou Thunder. We invest in their growth, flexibility, and well-being-knowing their success drives ours.