Cybersecurity Specialist (RMF)

GENERAL SUMMARY: The Cybersecurity Specialist (RMF) plays a critical role in obtaining and maintaining authorization of Condition-Based and Remote Monitoring systems directly supporting the Naval Sea Systems Command (NAVSEA) operations. In this role, you will work with technical teams, system stakeholders, program offices, and authorization officials to ensure RMF activities are consistently executed, properly documented, and aligned with U.S. Navy cybersecurity requirements and standards., * Be able to work independently and collaboratively with various stakeholders in a remote/hybrid role. Support the implementation and maintenance of cybersecurity processes including Risk Management Framework (RMF) activities and compliance with DoW and Navy policies. Work closely with technical teams to ensure all systems meet rigorous security standards, directly contributing to the operational effectiveness and security of Navy enterprise and standalone systems. Coordinate with stakeholders, support technical efforts, and report status of efforts to achieve and maintain Authority To Operate (ATO) approval for multiple systems. Lead and support RMF Assessment & Authorization activities for Navy Condition Based Monitoring (CBM) systems. Collaborate with stakeholders to resolve security issues affecting the accreditation of new and existing systems. Prepare and maintain Body of Evidence (BoE) documents such as System Security Plan (SSP), Risk Assessment Report (RAR), Plan of Action and Milestones (POA&M), Security Assessment Plan (SAP), and policy and procedures requirements. Conduct, analyze, and report results of system-level security testing including vulnerability scans and configuration reviews. Align cybersecurity engineering and RMF controls for evidence generation, POA&M tracking, and continuous monitoring. Support continuous monitoring activities of CBM systems.

SALARY RANGE: $85,000 - $145,000/yr

*Actual compensation may vary based on various factors, including but not limited to, educational background, relevant experience, knowledge, skills, and abilities, market factors and geographic location.

• U.S. Citizenship is required for this position per 32 CFR Part 117. Must have an active government security clearance or the ability to receive approval upon position acceptance. Certification is required (must possess one of the following):

• CCNA-Security, * Ability to obtain OS certification or complete approved related training within 180 days of hire.
• Possess or be able to obtain a valid US passport.

EDUCATION REQUIREMENTS:

• Bachelor’s degree from accredited university; or CNSSI 4012/4013/4014/4015/4016 certificate; or NDU CISO certificate; or NEC 2780/2779/2781 or DoW Service equivalent course., * 3+ years of experience in Cybersecurity or an Assessment and Authorization (A&A) related field. 3+ years of experience with Information Assurance tools such as DISA eMASS, ACAS, STIGs, etc. Experience supporting or developing RMF artifacts such as SSPs, POA&Ms, and authorization documentation. Experience with DoW cloud environment Amazon Web Service (AWS) preferred. Familiarity with U.S. Government or Department of War development environments preferred. Experience working in or collaborating with a DevSecOps environment preferred.

Comprehensive health program for employee and dependents Company paid Dental and Vision 401(k) with company match Short-term and Long-term disability - Company paid Life Insurance and AD&D - Company paid Voluntary Spouse and Child Life Insurance Paid time off with company holiday Tuition Reimbursement Employee Assistance Program (EAP) *Benefit eligibility is set forth in benefit plan documents and organization policies.

Founded in 1994 as a small, diversified professional services company, Delphinus today employs more than 650 professional and technical personnel supporting a customer base that spans the Defense and Federal markets.

Headquartered in Newtown Square, PA, we have primary offices in Norfolk, VA; San Diego, CA; and Bremerton, WA.