Authorization To Operate

Authorization To Operate Cybersecurity Jobs

4 jobs found

Today

Senior Cybersecurity Engineer - RMF/ISSE Lead

CACI Sterling, VA

Sterling, VA

Today

$104k - $218k/yr Full time Manager Senior Application Security

Apply Now

Job Description

The Senior Cybersecurity Engineer - RMF/ISSE Lead will support and strengthen the security posture for a division’s family of Electronic Warfare systems. This onsite role in Sterling, VA focuses on leading RMF execution, guiding systems through Authorization to Operate (ATO), and managing a small team of Security Engineers across the system lifecycle.

Role Overview

Lead the security engineering effort for Electronic Warfare systems by executing Risk Management Framework (RMF) activities across Steps 1 through 6. Serve in ISSO/ISSE capacity to guide systems from initial categorization to ATO, while ensuring Assessment & Authorization (A&A) documentation and continuous monitoring support ongoing compliance.

Key Responsibilities

Lead, mentor, and manage a team of 3-5 Security Engineers.
Oversee project timelines and ensure delivery of high-quality security solutions; conduct performance evaluations and support ongoing professional development.
Direct the design and documentation of secure system architectures spanning web applications, application stacks, Web Application Firewalls (WAFs), and Intrusion Detection/Prevention Sensors (IDS/IPS).
Manage secure architecture activities that include antimalware technologies and Advanced Persistent Threat (APT) prevention.
Define security requirements and integrate security capabilities across all SDLC phases (initiation, acquisition/development, implementation, operations/maintenance, disposition) following NIST 800-64 Rev. 2 guidance.
Execute RMF activities (Steps 1-6) and perform ISSO/ISSE functions to support progress through ATO.
Direct team efforts supporting DoD or IC acquisition programs resulting in IATT and/or ATO.
Develop, maintain, and review A&A documentation using Xacta, eMASS, or equivalent tools, including SSP, SCTM, and BoE.
Ensure hardware and software meet Government Security Certification Officer (SCO) requirements and align with NIST SP 800-53, ICD 503, and CNSSI 1253 standards.
Implement continuous monitoring (ConMon) and lead security audits using IC and DoD approved scanning tools, including Nessus/ACAS, SCAP/SCC, STIG Viewer, Nmap, and additional vulnerability assessment platforms.
Direct incident response activities and participate in an on-call rotation for security incidents.

Required Qualifications

Bachelor’s degree in computer science, Cybersecurity, Engineering, Information Technology, or related field (or equivalent experience).
10+ years with demonstrated ISSE/ISSO responsibilities, preferably within the Intelligence Community or DoD.
Experience achieving IATT and/or ATO on DoD or IC acquisition programs.
People management or team leadership experience.
Current active TS/SCI eligibility.
DoD 8570/8140 IASAE Level III (e.g., CISSP).
Familiarity with RMF processes and NIST SP 800-53 and NIST 800-64 Rev. 2.
Experience integrating security across the full SDLC: initiation, acquisition/development, implementation, operations/maintenance, and disposition.
Working knowledge of network protocols (TCP/IP, DNS, HTTP/HTTPS), VPNs, IDS/IPS, firewalls, and DMZ configurations.
Hands-on Linux/Unix experience.
Experience with web applications, application stacks, WAFs, and application-layer security controls.
A&A tracking tools experience including Xacta or eMASS, and SCAP/SCC, plus vulnerability assessment tools such as Nessus, ACAS, and additional platforms.

Technologies and Tools

Risk Management Framework (RMF), NIST 800-64 Rev. 2, NIST SP 800-53, ICD 503, CNSSI 1253
ISSO, ISSE, IATT, Authorization to Operate (ATO)
Xacta, eMASS, SSP, SCTM, BoE
Nessus/ACAS, SCAP/SCC, STIG Viewer, Nmap, Linux/Unix
TCP/IP, DNS, HTTP/HTTPS, VPNs, IDS/IPS, firewalls, DMZ configurations
Web Application Firewalls (WAFs), web applications, antimalware technologies, Advanced Persistent Threat (APT) prevention

Benefits

Flexible time off benefit
Robust learning resources
Healthcare
Wellness
Financial benefits
Retirement
Family support
Continuing education
Time off benefits

Incident Response

Direct incident response activities and participate in an on-call rotation for security incidents.

Clearance and Certifications

Current active TS/SCI eligibility
DoD 8570/8140 IASAE Level III (e.g., CISSP)

Travel Requirements

Percentage of Travel Required: Up to 10%
Type of Travel: Local

Compensation

Salary range: USD 103,800 - 218,100 per year.

View full job page →

Today

Cybersecurity Specialist

E Logic Atlanta, GA

Atlanta, GA

Today

$125k+/yr Full time Authorization To Operate Fedramp Fisma

Apply Now

Job Description

E Logic seeks a Cybersecurity Specialist based in Atlanta, GA (onsite) to support a Secure HIV-TRACE program from the CDC. The role focuses on information security compliance, continuous monitoring, and the Authorization to Operate (ATO) workflow, aligned to federal security requirements.

Role Summary

The position is responsible for ensuring the program’s security posture meets federal compliance obligations, including NIST SP 800-53, FISMA, and FedRAMP guidance. Work includes security assessment and authorization documentation, ongoing vulnerability visibility, and coordination of remediation planning through POA&M tracking.

Key Responsibilities

Oversee compliance with federal cybersecurity frameworks, including NIST SP 800-53, FISMA, and FedRAMP guidelines.
Lead the Security Assessment & Authorization (SA&A) processes and develop or compile required security artifact documentation.
Conduct continuous vulnerability monitoring, perform assessments, and support remediation planning.
Manage Plan of Action and Milestones (POA&M) tracking and coordinate activities with federal cybersecurity officers.

Requirements

Comprehensive knowledge of NIST SP 800-53 controls, FISMA, and FedRAMP compliance requirements.
Demonstrated experience executing the full SA&A and ATO lifecycles for federal IT systems.
Hands-on experience with vulnerability scanning tools, security hardening, and POA&M management.
Relevant security certifications (e.g., CISSP, CISM, CAP) are strongly preferred.

Relevant Technologies

NIST SP 800-53
FISMA
FedRAMP
Security Assessment & Authorization (SA&A)
Authorization to Operate (ATO)
Plan of Action and Milestones (POA&M)
Vulnerability scanning tools

Compensation and Location

Salary: USD 125,000 per year.
Location: Atlanta, GA (onsite).

Important Notice

This role is part of a proposal for the Centers for Disease and Prevention (CDC). Hiring is contingent upon the selection of the consultant.
Selected candidates will be included in the proposal and must authorize the use of their resume for submission.

View full job page →

Today

Information System Security Engineer

MANTECH Washington, DC

Washington, DC

Today

Full time Authorization To Operate Cybersecurity Tools Engineer

Apply Now

Job Description

MANTECH is seeking an Information System Security Engineer (ISSE) to define and implement cybersecurity requirements and network security measures for an IS and Network Environment on an onsite basis in Washington, DC.

Responsibilities

Assess information protection needs for an IS and Network Environment; define security requirements aligned to applicable cybersecurity requirements
Design security architectures for the IS and Network Environment; design and develop cybersecurity-enabled products for operational use
Integrate and/or implement security capabilities with Cross Domain Solutions (CDS) for the IS and Network Environment
Create security designs for new or existing network systems; ensure hardware, operating systems, and software applications address required cybersecurity controls
Design, develop, and implement network security measures to support confidentiality, integrity, availability, authentication, and non-repudiation
Develop and implement specific cybersecurity countermeasures for the IS and Network Environment
Produce interface specifications for the IS and Network Environment
Apply vulnerability mitigation approaches for the IS and Network Environment and recommend changes to network or network system components as needed
Ensure network system designs support incorporation of FBI directed cybersecurity vulnerability solutions

Requirements

Meets one of the following experience levels:
- High school diploma/GED and 14 years of experience
- Associate’s degree and 7 years of experience
- Bachelor’s degree and 5 years of experience
- Master’s degree and 3 years of experience
Holds at least one certification:
- CISSP (or Associate)
- CompTIA Advanced Security Practitioner (CASP) CE
- Certified Secure Software Lifecycle Professional (CSSLP)
- CISSP- Information System Security Engineering Professional (ISSEP)
- CISSP- Information System Security Architecture Professional (ISSAP)
Familiarity with security tools and operations, including Tenable Nessus and/or Security Center, IBM Guardium, HP WeblInspect, Network Mapper (NMAP), or similar applications
Working knowledge of the NIST Risk Management Framework (RMF) and ATO processes
Current/active Top Secret clearance with eligibility to obtain SCI prior to starting
Willingness to undergo a polygraph

Technologies

Cross Domain Solutions (CDS)
Tenable Nessus
Security Center
IBM Guardium
HP WeblInspect
Network Mapper (NMAP)
National Institute of Standards and Technology (NIST) Risk Management Framework (RMF)
ATO processes

Preferred Qualifications

Degree in Computer Science, Cybersecurity, or other cyber discipline

Physical Requirements

Remain in a stationary position approximately 50% of the time
Occasionally move about inside the office to access file cabinets and office machinery
Constantly operate a computer and other office productivity machinery (calculator, copy machine, computer printer)
Often position self to maintain computers in the lab, including under desks and in the server closet
Frequently communicate with co-workers, management, and customers, which may include delivering presentations; must be able to exchange accurate information

View full job page →

1mo ago

IT Specialist (INFOSEC)

US Office of the Chief Information Officer Alexandria, VA

Alexandria, VA

1mo ago Closed

$122k - $158k/yr Full time Authorization To Operate Information Security Information Technology (IT)

This position is no longer accepting applications (closed Aug 4, 2026).

Job Description

Benefits and Work Arrangements

Salary: USD 121,785 to 158,322 per year
Location: Alexandria, VA on site
Work arrangements: HUD offers alternative and flexible work schedules
Employment type: Bargaining unit position
Compliance: Exempt from the Fair Labor Standards Act (FLSA)
Relocation and incentives: Relocation expenses, relocation incentive, and recruitment incentive will not be paid
Application sharing: You may indicate if you would like your application information shared with other HUD Program Offices during the online process

Responsibilities

Plan and execute complex assignments and develop new methods, policies, approaches, and procedures
Provide guidance on a wide range of complex issues
Interpret Operation Security (OPSEC) policies, standards, and guidelines
Serve as the Information System Security Officer (ISSO) and principal POC for security of the IT systems under the ISSO
Oversee security plan preparation, including Authorization to Operate (ATO) coordination with the System Owner
Conduct risk and vulnerability assessments to identify vulnerabilities and protection needs
Promote security awareness among management and align security principles with organizational goals
Conduct systems security evaluations, audits, and reviews
Develop systems security contingency plans and disaster recovery procedures
Prepare and present complex reports on various subjects
Analyze and resolve complex security operations issues and ensure IT program integration
Develop and manage systems to meet current and future business requirements and optimize the architecture
Coordinate the implementation of computer security technical solutions and corrective actions with stakeholders

Requirements

Must be a U.S. Citizen or U.S. National
A one year probationary period may be required
Must successfully complete a background investigation
Public Trust background investigation required
Complete a Declaration for Federal Employment to determine suitability for Federal employment
Salary payments via Direct Deposit/Electronic Funds Transfer
If male and born after December 31, 1959, must certify Selective Service registration or exemption
Undergo a Personal Identity Verification (PIV) process requiring two forms of identification from Form I-9
Obtain and use a Government-issued charge card for business travel
Refer to Additional Information Section for additional Conditions of Employment
Interpret and implement existing IT security policies, standards, guidelines, and procedures
Perform vulnerability assessments of networks and systems and recommend corrective actions to senior management
Develop, implement, and coordinate activities to protect and restore IT systems, services, and capabilities
Coordinate implementation of computer security technical solutions with system stakeholders
Attention to detail in all work and thoroughness in performing duties
Customer service orientation to assess needs, provide information, resolve problems, and deliver quality services
Effective oral communication tailored to the audience and context
Strong problem solving and judgment to evaluate information and recommend solutions

Open to

The public: U.S. Citizens, Nationals or those who owe allegiance to the U.S.
Career Transition (CTAP, ICTAP, RPL): Federal employees whose job, agency, or department was eliminated and are eligible for priority over other applicants

Additional Information

OTHER INFORMATION: We may select from this announcement or any other source to fill one or more vacancies
Relocation expenses will not be paid
Relocation incentive will not be paid
Recruitment incentive will not be paid
This is a bargaining unit position
This position is Exempt from the Fair Labor Standards Act
HUD offers alternative and flexible work schedules
This announcement may be used to fill additional vacancies for similar positions across HUD
During the online application, you may indicate if you want your information shared with other HUD Program Offices

Conditions of Employment

HUD employees are subject to government-wide and HUD-specific ethics laws, with restrictions on engagement in real estate related business and other activities. For details on applicable ethics rules and HUD-specific restrictions, see the HUD ethics information page.

Reasonable Accommodation Requests

If you need a reasonable accommodation for the USA Hire Competency Based Assessments, you may request it in your online application with supporting documentation. Requests must be received prior to starting the USA Hire Competency Based Assessments. Decisions on requests are made on a case-by-case basis.

View full job page →

Authorization To Operate Cybersecurity Jobs

Senior Cybersecurity Engineer - RMF/ISSE Lead

Cybersecurity Specialist

Information System Security Engineer

IT Specialist (INFOSEC)

Get Authorization To Operate Cybersecurity Jobs alerts