Security Risk Framework

Security Risk Framework Cybersecurity Jobs

2 jobs found

Today

Cybersecurity Engineer / RMF Specialist

Agile Defense Columbus, OH

Columbus, OH

Today

Full time Cyber Risk Assessment Cyber Security Engineer Cybersecurity Tools

Apply Now

Job Description

Agile Defense is seeking a Cybersecurity Engineer / RMF Specialist to support a federal customer by documenting, assessing, and strengthening the security posture of building and facility control systems. This role is documentation and assessment focused within a small onsite cyber team, helping the customer achieve and maintain an Authority to Operate (ATO) through the RMF process.

Key Responsibilities

Develop and maintain RMF documentation and security artifacts, including system diagrams, system categorization documents, control implementation write-ups, and plans of action.
Collect, consolidate, and organize technical information provided by system owners, engineers, and operations staff into audit-ready deliverables.
Support system categorization and risk assessment activities by preparing required documentation and tracking stakeholder inputs.
Review vulnerability scan results and create remediation plans (POA&Ms), tracking progress through to closure.
Assist with STIG and security control checklists by documenting compliance status and any exceptions.
Maintain accurate inventories of in-scope hardware, software, and documentation.
Coordinate with the government remote cybersecurity team, program managers, and security officers to ensure artifacts meet enterprise expectations.
Provide timely monthly reporting and recurring customer deliverables in the required format.
Support ramp-up phase activities, including capturing and validating documentation from the outgoing team.

Required Qualifications

Meet DoD 8140.03 certification requirements for this role (IAM Level I), such as Security+ CE.
Complete role-based computing environment certification before privileged access within 180 days of the first day.
Hands-on experience supporting the RMF process in a federal, DoD, or similarly complex environment.
Experience producing security documentation and artifacts reviewed by a government ISSM, auditor, or authorizing official.
Bachelor’s degree is not required; candidates with equivalent experience, technical training, or industry certifications will be considered.
Working knowledge of federal cybersecurity frameworks including FIPS 199/200, NIST 800-53, NIST 800-82, and CNSSI 1253.
Familiarity with DoD cybersecurity tools for vulnerability scanning and compliance checking (including ACAS and SCAP) and the ability to interpret outputs.
Strong written communication to convert technical input from engineers and operators into clear, defensible documentation.
Attention to detail and the ability to manage multiple deliverables with overlapping deadlines.
Ability to coordinate with program managers, remote cybersecurity stakeholders, security officers, engineers, and vendors to obtain required inputs.
US Citizenship and the ability to obtain and maintain a Secret security clearance.

Technologies and Frameworks

RMF, DoD 8140.03, Security+ CE, FIPS 199/200, NIST 800-53, NIST 800-82, CNSSI 1253, ACAS, SCAP, STIG, eMASS, Purdue Enterprise Reference Architecture, FedRAMP, Zero Trust, PIA/PRiLA

Preferred Qualifications

Experience uploading and maintaining artifacts in eMASS or a similar RMF package management system.
Experience supporting OT/ICS/SCADA or facility related control systems (for example, building automation and advanced metering).
Knowledge of the Purdue Enterprise Reference Architecture.
Experience supporting ATO or ATC efforts from start to finish.
Familiarity with FedRAMP and Zero Trust principles.
Experience with privacy documentation (PIA/PRiLA) or contingency plan artifacts.
Prior DLA customer experience.

Location

Columbus, OH | Onsite

View full job page →

Today

Lead Cybersecurity Architect

General Dynamics Information Technology San Antonio, TX

San Antonio, TX

Today

$157k - $213k/yr Full time Manager Ato Management Cybersecurity Architecture

Apply Now

Job Description

Lead end-to-end defensive cyber architecture while helping shape Department of Defense security posture from Zero Trust through authorization lifecycle management. This onsite role in the San Antonio region offers a strong benefits package, paid time off, and professional growth support, including paid education and certifications, alongside the structure needed to execute continuous improvement in risk and incident response.

Salary: USD 157,250 - 212,750 per yearly
Location: San Antonio, TX (onsite)
Clearance: Top Secret (SCI eligibility required)
Travel: Less than 10%
Req#: RQ230352

What You’ll Own

Own the DoD Defensive Cyber security posture from Zero Trust architecture through RMF/ATO lifecycle management.
Lead end-to-end architectural design, technical implementation, and strict configuration management for security boundaries and active cyber defenses.
Maintain full responsibility for the RMF lifecycle, including authoring RMF documentation, generating security artifacts, navigating the authorization process, and executing continuous Authority to Operate (ATO) management in accordance with DoD guidance and NIST SP 800-37.

Zero Trust, Identity, and Access Engineering

Implement and enforce the DoD Zero Trust strategy by designing an enterprise ICAM framework.
Define and oversee core ICAM components including identity providers (IdP), privileged access management (PAM), Role Based Access Control (RBAC), and Multi-Factor Authentication (MFA).

Incident Response and Threat Intelligence Operations

Lead incident response and threat intelligence operations by designing, deploying (upon Government approval), and managing an enterprise-grade Malware Information Sharing Platform (MISP) as a centralized Cyber Threat Intelligence repository.
Establish workflows and API integrations to ingest, correlate, and disseminate Indicators of Compromise, adversary TTPs, and zero-day malware signatures.
Develop, manage, and continuously refine overarching Enterprise Cyber Incident Response strategies, policies, and playbooks.

Required Qualifications

Mastery of Zero Trust architecture (ICAM, PAM, RBAC, MFA), NIST RMF (SP 800-37), SIEM/SOAR engineering, EDR platforms, and MISP administration.
Ability to lead incident response in alignment with CJCSM 6510.01B.
Daily SCIF access is essential for continuous access to classified threat intelligence feeds and incident response coordination.
Bachelor’s degree in a relevant field and the following experience profile: 12–15 years in cybersecurity engineering; 8+ years RMF/ATO leadership; 5+ years designing Zero Trust/ICAM architectures; 5+ years enterprise IR/threat hunting experience.
Security Clearance Level: Top Secret with SCI eligibility.
Certification: CISSP.
US citizenship required.
Location: San Antonio region, TX.

Technologies You’ll Work With

Zero Trust, ICAM, PAM, RBAC, MFA
NIST SP 800-37, RMF, ATO
SIEM, SOAR, EDR
MISP, API integrations
CJCSM 6510.01B
Identity providers (IdP)

Benefits

401K with company match.
Comprehensive health and wellness packages.
Professional growth opportunities including paid education and certifications.
Paid vacation and holidays to rest and recharge.
Full-flex work week to manage priorities at work and at home.

Identity Verification

Identity verification uses advanced biometrics and artificial intelligence.
Virtual interviews require being on camera.
The company reserves the right to take your picture to verify your identity and prevent fraud.
Proceeding authorizes collection, processing, and use of biometric data for identity verification and security purposes.

View full job page →

Security Risk Framework Cybersecurity Jobs

Cybersecurity Engineer / RMF Specialist

Lead Cybersecurity Architect

Get Security Risk Framework Cybersecurity Jobs alerts