Cyber Security Specialist (RMF)

Responsibilities

• Communicate clearly and succinctly both written and orally, and present products and ideas in a business-like manner.
• Communicate complex technical requirements to non-technical personnel; and prepare briefings to senior officials on complex issues.
• Work in dynamic fast-paced environments that require team interaction and coordination of efforts.
• Provide management support to the RMF for NIPR/SIPR & Coalition networks under the purview of the Command.
• Formulate plans and schedules to conduct either portions or all of the RMF process on selected products.
• Develop, update, organize, maintain, and track RMF documentation using information obtained from the customer.
• Provide assessment and authorization (A&A) support in the development of security and contingency plans and conduct complex risk and vulnerability assessments.
• Analyze policies and procedures against DoD security policies and regulations and provide recommendations for closing gaps.
• Recommend system enhancements to improve security deficiencies.
• Interface with both client managers and system users.
• Analyze customer DevSecOps security controls and AI/ML security controls and provide feedback and recommendations as needed.

Qualifications

• NIST 800-53, Risk Management Framework, Security Requirements Certifications.
• CompTIA Security+ CE | CompTIA.
• Education: Bachelor’s degree in Information Systems, Computer Science, Computer Engineering, or another related field.
• Experience: 3+ years of related experience.
• Technical skills: Experience conducting RMF process, per NIST SP 800-37 for in-development or existing programs or systems.
• Experience personally drafting RMF products.
• RMF Certification or equivalent.
• Detailed knowledge of NIST SP 800-53.
• Expert level experience with DoD IT security requirements.
• Expert level experience in Certification and Accreditation (C&A) process and development of Risk Management Framework (RMF) certification packages.