Role details

Contract type

Contract

Employment type

Full-time (> 32 hours)

Experience level

Experienced

Experience required

5 years minimum

Working hours

Regular working hours

Job source

www.dice.com

Tech stack

Software Documentation Cyber Security Plan of Action and Milestones Vulnerability Analysis

Job description

• Perform RMF analysis, planning, and execution for client systems, covering categorization, control selection, implementation support, assessment, authorization, and continuous monitoring
• Establish and maintain system ATOs, including developing and updating authorization package artifacts (System Security Plans, security assessment documentation, Plans of Action and Milestones, and supporting system documentation)
• Categorize systems and select and tailor security controls, applying the applicable baselines and overlays
• Coordinate with system owners, engineers, security control assessors, and the information system security manager to implement and validate security controls
• Run continuous monitoring: review vulnerability scan results, track STIG compliance, manage POA&M remediation, and support ongoing authorization
• Review system changes and assess their security impact to protect ATO status
• Provide cybersecurity engineering support, including secure configuration and hardening guidance for the client’s systems
• Maintain accurate, audit-ready compliance documentation and support inspections and reviews
• Brief technical and program stakeholders on risk, compliance status, and remediation priorities

Requirements

• Active Secret clearance
• Ability to work on-site in Aberdeen, MD for the full contract
• Mid-level experience in cybersecurity or information assurance with hands-on DoD RMF work (suggested minimum 5 years; confirm with the client)
• Working knowledge of the DoD RMF, NIST SP 800-37 and 800-53, and DoD cybersecurity policy
• Experience building and maintaining ATO packages from start to finish
• Experience analyzing vulnerability scan results and managing POA&Ms
• Familiarity with DISA STIGs and secure configuration baselines
• Strong written and verbal communication skills
• A DoD 8570/8140 baseline certification (for example Security+ CE, CASP+, CISSP, or CISM; confirm the required level with the client), * Experience supporting Army or other DoD test, engineering, or non-traditional systems
• Experience with DoD RMF management tools such as eMASS
• Bachelor’s degree in a technical field, or equivalent experience
• CISSP, CISM, or CAP

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.dice.com

Prepare application

• Draft this with your agent
• Open in Claude
• Open in ChatGPT
• Copy prompt