Nist 800 53a

Nist 800 53a Cybersecurity Jobs

3 jobs found

7d ago

Sr IT Security Engineer

Govcio LLC San Antonio, TX

San Antonio, TX

7d ago

$140k - $160k/yr Full time Senior Cloud Platforms Data Security

Apply Now

Job Description

Govcio LLC is seeking a Sr IT Security Engineer to support the 16AF/AF IC Zero Trust initiative at Joint Base San Antonio, Lackland in an onsite setting. In this role, you will help drive authorization and continuous monitoring activities under the RMF process, while strengthening cloud security architectures and advancing Zero Trust across both classified and unclassified environments.

Key Responsibilities

Lead and support RMF activities, including system categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
Develop, tailor, document, and validate security controls and implementation statements aligned to NIST, DoD, Air Force, and Intelligence Community requirements.
Prepare and maintain System Security Plans, Security Assessment Reports, Plans of Action and Milestones, risk assessments, and authorization packages.
Advise program managers, system owners, ISSOs, ISSMs, engineers, and Authorizing Officials on cybersecurity risks and remediation approaches.
Assess cloud architectures and services for compliance related to security, privacy, identity, logging, encryption, data protection, and boundary requirements.
Support Zero Trust implementation using identity-centric access control, least privilege, device trust, segmentation, continuous verification, and data-centric security.
Perform security control assessments, vulnerability reviews, configuration assessments, and continuous monitoring activities.
Coordinate remediation of findings, track risks through closure, or support formal risk acceptance.
Contribute to security architecture reviews, system design assessments, and mission-impact analyses.
Develop cybersecurity documentation, briefings, risk reports, and executive-level recommendations.

Required Qualifications

Clearance: TS/SCI
Education: High school diploma
Experience: 8+ years in information security or cybersecurity engineering (with significant federal, DoD, Air Force, or Intelligence Community work), and 9+ years total experience in cybersecurity, computer science, information systems, engineering, or a related discipline
Maintain an active certification that meets DoD 8570 IAT III in lieu of DoD 8140 job code 633 (System Security Engineer)
Understanding of systems security design and engineering principles
Knowledge of cybersecurity and Zero Trust reference architectures
Strong understanding of SIEM systems
Strong understanding of security for cloud-based platforms and applications
Excellent spoken and written communication skills
Experience creating security workflows and diagrams based on system architecture
Understanding of Model Based Systems Engineering and how it correlates to cybersecurity
Demonstrated experience executing RMF activities for moderate- or high-impact systems
Strong knowledge of NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, and applicable DoD or Intelligence Community cybersecurity guidance
Experience developing, tailoring, implementing, and assessing security controls
Experience preparing authorization packages and working with system owners, ISSOs, ISSMs, security assessors, and Authorizing Officials
Practical knowledge of cloud security architectures covering identity and access management, encryption, logging, network security, configuration management, and secure service deployment
Knowledge of Zero Trust principles and architectures across identity, device, application, network, and data protection
Ability to analyze technical and operational risks and communicate findings to technical and executive audiences

Technologies

NIST SP 800-37
NIST SP 800-53
NIST SP 800-53A
DoD 8570 IAT III
DoD 8140 job code 633 (System Security Engineer)
SIEM systems

Preferred Skills and Experience

Experience supporting Air Force, Space Force, DoD, and/or Intelligence Community systems and mission applications
Experience with classified environments, cross-domain solutions, high-side/low-side architectures, and compartmented or mission-partitioned systems
Experience with FedRAMP, DoD Cloud Computing Security Requirements Guide, IL4/IL5/IL6 environments, or comparable cloud authorization processes
Experience implementing Zero Trust using identity governance, privileged access management, micro segmentation, endpoint detection and response, security analytics, and continuous diagnostics
Familiarity with CNSSI 1253, ICD 503, DoD RMF guidance, Air Force cybersecurity policy, and applicable Intelligence Community directives
Experience with cloud platforms such as AWS, Microsoft Azure, or Google Cloud
Experience with GRC and security tools including eMASS, ServiceNow GRC, Archer, Tenable, ACAS, SCAP, Splunk, Microsoft Sentinel, or comparable platforms
Experience performing security architecture reviews, threat modeling, attack-surface analysis, and control inheritance analysis
Experience leading technical teams, mentoring junior security personnel, or briefing senior government stakeholders

Location: San Antonio, TX (onsite)

Salary: USD 140,000 - 160,000 per year

View full job page →

9d ago

Senior Principal Cyber Information Systems Security Engineer

SAIC Norfolk, VA

Norfolk, VA

9d ago

$160k - $200k/yr Full time Senior Cyber Security Engineer

Apply Now

Job Description

SAIC is seeking a Senior Principal Cyber Information Systems Security Engineer to lead Risk Management Framework (RMF) package development, management, and authorization across both unclassified and classified environments. In this role, you will serve as a senior principal authority supporting the full RMF lifecycle, from initiation through authorization and continuous monitoring for DoD enterprise IT and network modernization efforts.

This position is based in Norfolk, VA (onsite) and supports concurrent authorization activities for multiple systems, with direct coordination across program, engineering, and government stakeholders to achieve and sustain Authority to Operate (ATO).

Key Responsibilities

Act as Senior Principal ISSE and subject matter expert responsible for leading development, management, and authorization of RMF packages across unclassified and classified environments supporting DoD enterprise IT and network modernization programs
Lead end-to-end RMF lifecycle activities aligned to NIST SP 800-39, 800-37, 800-53, 800-53A, and 800-137 for multiple simultaneous unclassified and classified systems
Categorize systems and information using FIPS 199 and NIST SP 800-60; select and tailor initial security control baselines using FIPS 200 and NIST SP 800-53
Implement security controls using NIST Special Publication guidance including 800-34, 800-64, and 800-128, and document implemented security controls in a functional manner
Assess security controls according to NIST SP 800-53A to verify correct implementation, intended operation, and achievement of desired outcomes
Manage and maintain eMASS records for assigned systems, ensuring accuracy and completeness of all RMF artifacts, POA&Ms, and authorization documentation across the system lifecycle
Drive RMF packages through the full authorization workflow in accordance with Navy and DoD RMF processes, coordinating with Authorizing Officials (AOs), Information System Owners (ISOs), and Program Managers to achieve and maintain ATO
Ensure continuous monitoring based on NIST SP 800-137, NIST SP 800-37, NIST SP 800-53A, and related special publications to maintain ongoing ATO compliance
Collaborate with engineering teams to identify, document, and implement security controls across complex DoD enterprise IT and network infrastructure environments
Perform internal auditing functions supporting ISO/IEC 9000, 20000, and 27001, and coordinate with external auditors to ensure actions meet industry standards
Conduct policy analysis to author or support authoring of new enterprise cybersecurity policy aligned with DoD and Navy security requirements
Provide expert technical guidance and mentorship to junior cybersecurity team members on RMF processes, eMASS management, and ATO authorization workflows
Serve as organizational spokesperson and prime ISSE technical contact for significant cybersecurity authorization matters requiring coordination between program teams, engineering organizations, and government stakeholders
Support business development through technical proposal development, capability demonstrations, and customer relationship management for program re-compete and growth opportunities

Required Qualifications

U.S. Citizen
Bachelor’s degree with 14+ years of related experience; Master’s degree with 12+ years; or PhD or JD with 9+ years
10+ years of hands-on ISSE and RMF experience with demonstrated senior principal-level contributions across complex DoD program authorization environments
Must have an Active Secret Clearance at start
Must be able to obtain TS/SCI after start
DoD 8570/8140 IAM Level III or IAT Level III certification required (CISSP, CISM, or equivalent)
CompTIA Security+ CE required at minimum
RMF lifecycle management experience covering NIST 800-37, 800-53, 800-53A, and 800-137
Experience with eMASS system management and ATO package development
Experience with FIPS 199/200 system categorization and security control selection
Experience with POA&M development, tracking, and remediation management
Experience with unclassified and classified system authorization workflows
Background in DoD enterprise IT and network infrastructure security

Technologies

Risk Management Framework (RMF)
eMASS
NIST SP 800-39, 800-37, 800-53, 800-53A, 800-137
FIPS 199 and NIST SP 800-60
FIPS 200
NIST SP 800-34, 800-64, 800-128
ISO/IEC 9000, ISO/IEC 20000, ISO/IEC 27001
NIST Special Publication guidance
POA&M

Compensation: USD 160,001 - 200,000 per year.

Experience Level: 10+ years minimum; structured qualifications reflect degree-dependent experience requirements.

View full job page →

1mo ago

Cybersecurity Analyst

GEM Technology, Inc. West Mifflin, PA

West Mifflin, PA

1mo ago Closed

$110k - $150k/yr Contract Cybersecurity Tools Fedramp Information Security

This position is no longer accepting applications (closed Sep 24, 2026).

Job Description

Cybersecurity subcontractor role supporting National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) deliverables in an onsite environment.

Responsibilities

Support and execute NIST RMF directives across the full RMF workflow.
Assist information system owners with development of System Security Plans (SSPs) and Security Assessment Reports (SARs) to support information system authorization.
Use the existing RSA Archer application on Naval Nuclear Propulsion Network (NNPP Net) to complete authorization package tasks.
Support creation of Plans of Action and Milestone (POA&Ms) and Risk Based Decisions (RBDs) for deficiencies identified during the authorization process.

Requirements

4+ years combined experience in one or more of the following roles: security control validator, security control assessor, Information System Security Officer (ISSO), or Information System Security Manager (ISSM).
2+ years supporting development of information system security authorization packages aligned to NIST 800-37, NIST 800-53, and NIST 800-53a under RMF.
2+ years experience working with FedRAMP.
CompTIA Security+ certification.
US citizen only. Applications from Visa or Green Card holders are not accepted at this time.
Department of Energy Q Clearance required, or ability to obtain.

Key Technologies

RSA Archer application
NNPP Net (Naval Nuclear Propulsion Network)
RMF
NIST 800-37, NIST 800-53, NIST 800-53a
FedRAMP

Location

West Mifflin, PA (onsite)
Schenectady, NY (onsite)
Positions to be filled: one candidate at each location, or both candidates at a single location.
Preferred: West Mifflin, PA 15122

Work Schedule / Telework

25% teleworking
75% onsite required in West Mifflin, PA and/or Schenectady, NY
25% willingness to travel (required)
In person work location

Security Clearance & Timing

Department of Energy Q Clearance needed or ability to obtain.
Start date will be delayed until clearance is approved (could be 6 months or longer).
Security clearance requirement listed as Top Secret (Required).

Job Duration

1 year + 4 option years

Salary

USD 110,000 - 150,000 per year, based on qualifications and experience
Pay listed as $110,000.00 - $150,000.00 per year

Employment Type

Contract subcontractor
Job type also listed as Full-time, Contract

Education

Associate (Required)

Benefits

Dental insurance
Health insurance
Life insurance
Paid time off
Vision insurance

View full job page →

Nist 800 53a Cybersecurity Jobs

Sr IT Security Engineer

Senior Principal Cyber Information Systems Security Engineer

Cybersecurity Analyst

Get Nist 800 53a Cybersecurity Jobs alerts