Cybersecurity RMF Specialist

Dark Wolf Solutions is hiring a Cybersecurity RMF Specialist to own end-to-end DoD Risk Management Framework activities for IL5 and IL6 mission-critical software authorization.

Responsibilities

• Independently lead the end-to-end DoD RMF process for IL5 and IL6 environments, managing eMASS security controls, Artifacts, POA&Ms, and authorization documentation to maintain system compliance and security posture
• Run Continuous Monitoring (ConMon) activities and security artifacts, including maintaining, reviewing, validating, and submitting STIG checklists, architecture and network diagrams, HW/SW inventories, PPSM documentation, SBOMs, container image inventories, and supporting evidence to the DHA Cybersecurity Team
• Coordinate ACAS and SAST vulnerability scans, support IAVA compliance, and drive remediation efforts with the DHA Cybersecurity Team and Platform Engineers, tracking vulnerabilities and compliance findings through remediation and closure
• Translate DISA STIG, SRG, and NIST 800-53 requirements into actionable technical requirements, partner with Platform/Engineers to implement security controls through Infrastructure as Code (IaC), and perform security control assessments
• Serve as the primary cybersecurity liaison for government stakeholders, including support for CCB/change requests and briefing DHA cybersecurity teams and senior leadership on system security posture, compliance status, risks, remediation efforts, and the path to continued authorization

Requirements

• 5+ years of relevant cybersecurity experience with focus on DoD RMF and Impact Level 5/6 authorizations
• Direct experience with DoD Cloud Service Providers (example: AWS Govcloud)
• Proven ability to independently coordinate with government Security Control Assessors (SCA) and mission partners
• Experience with eMASS and the Enterprise Mission Assurance Support Service for managing DoD system records
• Knowledge of security scanning tools (including Static Analysis and Dynamic Analysis)
• Experience using Atlassian tools such as Jira and Confluence
• Ability to provide briefings, presentations, and facilitate meetings with senior leadership and stakeholders
• DoD 8140/8570 IAM Level III Certification (examples: CISSP, CISM, GSLC)
• US Citizenship and an active DoD Secret security clearance
• B.A. or B.S. in Information Security, Computer Science, or related discipline

Technologies

• eMASS
• Enterprise Mission Assurance Support Service
• ACAS
• SAST
• IAVA
• DISA STIG
• SRG
• NIST 800-53
• Infrastructure as Code (IaC)
• Atlassian Jira
• Atlassian Confluence
• AWS Govcloud

Desired Qualifications

• Experience with DoD Architecture Framework (DoDAF)
• Experience with Cloud Computing Security Requirements Guide (CC SRG)
• Experience with DoD DevSecOps Fundamentals Playbook
• Experience with DevSecOps platforms such as GitLab or GitHub
• Understanding of container based application development tools (examples: Docker, Docker Compose, Kubernetes)
• Understanding of Continuous ATO (cATO) concepts and integration of automated security testing into DevSecOps pipelines

Additional Details

• Location: Herndon, VA (hybrid)
• Compensation: $120,000 to $150,000 per year (commensurate on experience)
• Employment type: direct, full-time W2 employees only; no third-party staffing agencies, C2C, or 1099 contractors
• Eligibility: verification of identity, US Citizenship confirmation, and completion of required employment eligibility verification upon hire
• On-site requirement: hybrid presence in Northern Virginia

Summary: Own end-to-end RMF for DoD IL5 and IL6 mission-critical software authorization, including Body of Evidence development for Continuous Authorization to Operate (cATO), while partnering with platform engineers, developers, and government stakeholders to maintain compliance and security posture.