• Serve as a Cybersecurity Policy Analyst responsible for reviewing, updating, and maintaining DC3 Standard Operating Procedures (SOPs).
• Execute all RMF phases, including Prepare, Categorize, Select, Implement, Assess, Authorize, and Continuous Monitoring.
• Support systems in obtaining and maintaining Authorization to Operate (ATO) approvals.
• Develop and maintain security documentation, including SSPs, SAPs, POA&Ms, CMPs, Contingency Plans, and Incident Response Plans.
• Utilize eMASS to manage authorization packages, security artifacts, workflows, compliance activities, and POA&M tracking.
• Perform Security Impact Analyses (SIAs) to evaluate system changes and ensure continued compliance.
• Conduct vulnerability assessments, review scan results and STIG findings, and coordinate remediation efforts with system administrators and engineering teams.
• Create, track, and manage POA&Ms to address vulnerabilities and compliance gaps.
• Support Information System Continuous Monitoring (ISCM) activities for Microsoft Azure cloud and on-premises environments.
• Advise system owners and stakeholders on cybersecurity requirements, risk management, and authorization strategies.

• Bachelors degree and 8+ years of experience supporting cybersecurity programs
• Active Top Secret w/ SCI eligibility
• Certifications: IAT III (CISSP, CISM, CASP+, CCSP, etc.)
• Experience managing multiple RMF authorization packages
• Experience briefing Government leadership and preparing documentation
• Experience implementing Zero Trust architecture and cloud security

• Total compensation based on experience level - $140,000-$160,000+
• Full Benefits: PTO, Holidays, 401K, Medical Dental Vision coverage, Certification Reimbursement
• Contract stability and mobility through Zachary Piper Solutions

LI-MK1 #LI-Onsite

Keywords: Cybersecurity, Information Assurance, Risk Management Framework (RMF), Assessment and Authorization (A&A), Continuous Monitoring (ConMon), Authorization to Operate (ATO), Interim Authorization to Test (IATT), top secret, ts/sci, top secret/sci, polygraph, ts/sci, W2, opentowork, hiring, onsite, arlington, government, Federal, ATO with Conditions (ATO-C), Security Control Assessments (SCA), Cybersecurity Governance, Risk Management, Security Compliance, NIST RMF, DoD RMF, System Security Plans (SSP), Plans of Action and Milestones (POA&M), Security Assessment Reports (SAR), Body of Evidence (BoE), Vulnerability Management, STIG Compliance, Security Controls, Control Implementation, Risk Assessments, Risk Analysis, Authorization Packages, Cybersecurity Reporting, Audit Readiness, Security Accreditation, Continuous Authorization, Information System Security Officer (ISSO), Information System Security Engineer (ISSE), Authorizing Official (AO) Support, Security Engineering, System Architecture Reviews, Authorization Boundaries, Data Flow Analysis, Remediation Management, Corrective Action Tracking, Governance, Risk and Compliance (GRC), Federal Cybersecurity Compliance, Zero Trust Architecture (ZTA), Cloud Security, DevSecOps, Control Inheritance, Reciprocity, Enterprise Cybersecurity, Security Documentation, Executive Briefings, Stakeholder Engagement, Program Management Support, Security Strategy, Compliance Monitoring, Security Operations, Cyber Risk Management, Mission Assurance, Regulatory Compliance, Defense Cybersecurity, Security Lifecycle Management

Zachary Piper Solutions is seeking a Senior Information System Security Officer to support DoD Cyber Crime Center in Linthicum, MD. We are seeking an individual to execute each phase of the RMF lifecycle in support of the Cyber Crime Centers critical infrastructure. Details below