RMF and Cybersecurity Lead with Security Clearance

Amyx, Inc. · O'Fallon, IL · 1 mo ago

EngineeringFull-time

Supports RMF compliance, cybersecurity operations, and continuous monitoring.
Develops and maintains RMF artifacts (ATO/ATC, POA&Ms).
Supports vulnerability management and security audits.
Provides cybersecurity reporting and metrics.
Must be experienced in RMF compliance & documentation: develop/maintain documentation to obtain ATO/ATC; identify evidence/artifacts for A&A packages; manage RMF artifacts (risk acceptance memos, POA&Ms, etc.); update security documentation in eMASS or Government-selected tools; provide A&A metrics.
Continuous monitoring & vulnerability management: upload code/security scans/checklists; document AP/CCI mappings; track POA audit POA&M items; validate privileged user accounts as needed.
Compliance auditing & PPSM: support PPSM registry activities; ensure declared PPSMs follow applicable instructions; support internal/external security audits (including financial/privacy audits).
Cybersecurity operations: log analysis; support control audits/assessments; assess security control effectiveness; develop metrics and security posture reporting; support change management review for security impacts.
Incident reporting awareness: align reporting actions with DFARS 252.204

Desired: Secret Clearance.
Must have one CE cert/certificate aligned to OS/tools/devices supported (categories include OS, network support/defense, cloud/virtualization, applications, etc.)
Required: Experience supporting USTRANSCOM and working on at USTC. Experience supporting DoD. Demonstrated experience producing recurring cybersecurity deliverables (POA&M status, compliance reports, hygiene/scorecards, risk assessments) Familiarity with NIST 800-171 SSP expectations (contractor System Security Plan requirement).

Similar jobs