Senior Cybersecurity / RMF Professional
Senior
Authorization To Operate
Cybersecurity Operations
Data Security
Disa Stigs
Dod Rmf
Facilities Management
Information Security
InfoSec
Management
Project Management
Risk Governance
Risk Management
Rmf
Security
Security Clearance
Security Compliance
Security Operations
Security Standards
Security Testing
Job Description
B Technology seeks a Senior Cybersecurity / RMF Professional to deliver hands-on RMF lifecycle support, cybersecurity engineering, and software and hardware reconciliation for the U.S. Army Aberdeen Test Center (ATC) mission. The role is based onsite at Aberdeen Proving Ground in Aberdeen, Maryland, supporting security authorizations and secure mission operations alongside Government stakeholders and B Technology’s technical lead.
Role Responsibilities
- Support RMF analysis, planning, execution, lifecycle reporting, and ongoing maintenance of system Authorities to Operate (ATOs).
- Prepare and maintain security documentation, assessment evidence, system inventories, and software and hardware reconciliation records.
- Assist with system categorization and boundary documentation, support security control selection and implementation, and verify and validate control effectiveness.
- Assess system configurations against applicable DISA STIGs and related cybersecurity requirements, document findings, and coordinate authorized corrective actions.
- Conduct continuous monitoring and vulnerability management activities, maintain POA&Ms, and track remediation progress.
- Review proposed hardware and software baseline changes and support configuration management processes, technical reviews, and change control boards.
- Support Security Control Assessor visits, security audits, authorization reviews, and requests for technical evidence.
- Coordinate with system administrators, network personnel, and Government stakeholders to resolve findings and maintain accurate technical records.
Required Qualifications
- Active Secret clearance at the time of consideration for proposal submission; Top Secret clearance required by contract award.
- Ability to maintain the required clearance and retain access to assigned SIPRNet accounts throughout employment on the contract.
- Current CASP+ / SecurityX or CISSP certification, required by contract award.
- At least 5 years of experience supporting RMF lifecycle reporting and software and hardware reconciliation.
- Experience managing networks across Windows, Linux, and Apple platforms in both unclassified and classified environments.
- Ability to develop and maintain accurate cybersecurity documentation, track findings, and communicate technical issues and remediation status.
- Working knowledge of DoD RMF processes, security controls, DISA STIGs, continuous monitoring, and vulnerability remediation.
- Ability to work collaboratively with Government customers, cybersecurity staff, and system and network administrators.
- Ability to work onsite at Aberdeen Proving Ground and meet mission scheduling requirements.
- Ability to satisfy applicable Army/DoD cybersecurity training, certification, account access, and user agreement requirements.
Technologies and Tools
- RMF
- DISA STIGs
- Windows
- Linux
- Apple
- SIPRNet
- CASP+
- SecurityX
- CISSP
- POA&Ms
Preferred Qualifications
- Experience supporting Army or DoD cybersecurity, ATO sustainment, security control assessments, and configuration management.
- Experience applying NIST security controls and maintaining POA&Ms and authorization evidence.
- Current or recent experience supporting ATC cybersecurity engineering and RMF activities.
Benefits
- 401(k) and 401(k) matching
- Dental insurance
- Employee assistance program
- Flexible spending account
- Health insurance
- Life insurance
- Paid time off
- Professional development assistance
- Referral program
- Retirement plan
- Tuition reimbursement
- Vision insurance
Compensation, Employment, and Status
- Location: Aberdeen Test Center, Aberdeen Proving Ground, Maryland (onsite)
- Employment type: Full-Time
- Security clearance: Active Secret minimum; Top Secret required by contract award
- Certification: CASP+ / SecurityX or CISSP
- Status: Contingent upon contract award
- Salary: USD 75,000 to 105,000 per year