> Markdown version of [/jobs/ext/4353008-cybersecurity-rmf-specialist](https://www.wearedevelopers.com/jobs/ext/4353008-cybersecurity-rmf-specialist). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity RMF Specialist

- **Company:** Dark Wolf Solutions
- **Location:** Herndon, United States
- **Experience:** Expert
- **Salary:** $120,000.0 - $150,000.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Cloud Computing Security, Static Program Analysis, Cyber Security, Programming Tools, Dynamic Program Analysis, Github, Identity and Access Management, Network Diagrams, Cloud Services, Infrastructure as Code (IaC), Gitlab, Kubernetes, Information Technology, Atlassian Tools, DODAF, Devsecops, Docker, Static Application Security Testing, Vulnerability Analysis
- **Published:** October 13, 2026
- **Apply:** https://startup.jobs/cybersecurity-rmf-specialist-dark-wolf-solutions-10458194

## About the Role

* 5+ years of relevant Cybersecurity experience, with a focus on DoD RMF and Impact Level 5/6 authorizations
 * Direct experience with DoD Cloud Service Providers (e.g. AWS Govcloud) ecosystems
 * Proven ability to independently lead coordination with government Security Control Assessors (SCA) and mission partners
 * Experience with eMASS and the Enterprise Mission Assurance Support Service for managing DoD system records
 * Knowledge of security scanning tools (e.g., Static Analysis, Dynamic Analysis, etc.)
 * Experience with using Atlassian tools such as Jira and Confluence
 * Confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders
 * DoD 8140/8570 IAM Level III Certification (e.g., CISSP, CISM, or GSLC)
 * US Citizenship and an active DoD Secret security clearance
 * B.A. or B.S. Information Security, Computer Science or related discipline

Desired Qualifications:

 * Experience with the DoD Architecture Framework (DoDAF)
 * Experience with Cloud Computing Security Requirements Guide (CC SRG)
 * Experience with DoD DevSecOps Fundamentals Playbook
 * Experience with DevSecOps Platforms such as GitLab or GitHub
 * Understanding of container based application development tools (e.g., Docker, Docker Compose, Kubernetes)
 * Understanding of "Continuous ATO" (cATO) concepts and the integration of automated security testing into DevSecOps pipelines

## Description

* Leading the end-to-end RMF process specifically for DoD IL5 and IL6 environments, managing eMASS security controls, Artifacts, POA&Ms, and authorization documentation to maintain system compliance and security posture
 * Managing Continuous Monitoring (ConMon) activities and security artifacts, including maintaining, reviewing, validating, and submitting STIG checklists, architecture/network diagrams, HW/SW inventories, PPSM documentation, SBOMs, container image inventories, and supporting evidence to the DHA Cybersecurity Team
 * Coordinating ACAS/SAST Vulnerability scans, IAVA compliance, and remediation efforts with DHA Cybersecurity Team and Platform Engineers, tracking vulnerabilities and compliance findings through remediation and closure
 * Translating DISA STIG, SRG, and NIST 800-53 requirements into actionable technical requirements, partnering with Platform/Engineers to implement security controls through Infrastructure as Code (IaC) and performing security control assessments
 * Serving as the primary cybersecurity liaison for government stakeholders, supporting CCB/change requests and briefing DHA cybersecurity teams and senior leadership on system security posture, compliance status, risks, remediation efforts, and the path to continued authorization