- Location
- Washington, DC,US, US · Tysons, VA,US, US
- Type
- Full-time
- Department
- IT
- Experience
- 5+ years
- Clearance
- Required
- Source
- Eightfold
Description
Review test results (e.g., scans, STIGs), POA&Ms, and other cybersecurity artifacts for quality and completeness. Generate, update, or maintain system security documentation, including: System Security Plans System Inventory CONOPS Authorization Boundary Diagrams PPSM Security‑related plans and procedures (e.g., Media Protection, Access Control, Incident Response) Conduct security control assessments in accordance with NIST SP 800‑53. Lead and support continuous RMF compliance cycles by ensuring documentation, processes, and controls remain current and effective. Perform cyber risk assessments, artifact reviews, evidence evaluations, and compliance checks to validate the system's security posture. Analyze cyber risks, system gaps, and vulnerabilities; develop actionable remediation plans aligned with mission and compliance requirements. Interpret and apply cybersecurity and IA policies, including NIST guidelines, RMF requirements, FISMA standards, and applicable privacy directives. Collaborate with engineering teams, system owners, ISSOs, and mission stakeholders to ensure secure system design, implementation, and sustainment. Support audits, inspections, and formal security assessments by maintaining high‑quality documentation and readiness artifacts. Provide guidance on security‑control inheritance, boundary definition, continuous monitoring, and governance workflows. 5+ years of experience supporting continuous RMF compliance cycles, risk mitigation workflows, and security‑control documentation Experience synthesizing cyber risk, system posture, and compliance gaps into actionable remediation plans Experience conducting cyber risk assessments, evidence reviews, and compliance checks Experience with IA or cybersecurity in the areas of IA policies and procedures including Privacy, NIST, RMF, and FISMA TS/SCI clearance CompTIA Advanced Security Practitioner (CASP+), CompTIA Security+, or Systems Security Certified Practitioner (SSCP) certification DoD 8140 or CWF‑aligned certifications Knowledge of industry‑standard tools such as Tenable or Splunk Ability to lead or coordinate compliance readiness for audits, assessments, or enterprise governance activities Must possess at Top Secret/SCI clearance.