Isso

The Opportunity

Own theday-to-day security authorization posture of assigned DoD information systems

Work within awell-resourced team with dedicated engineering, operations, and architecturesupport

Develop expertisein modern RMF tooling including eMASS and eMASSer automation

Directly supportmission continuity by managing ATO packages and continuous monitoring programs

Grow into asenior GRC role with clear advancement pathways

Responsibilities

Develop,maintain, and update System Security Plans (SSPs) for assigned systems

Manage POA&Msfrom identification through remediation and closure

Compile andsubmit Authorization to Operate (ATO) packages

Conductcontinuous monitoring activities per established strategy

Utilize eMASS forGRC management and RMF workflow tracking

Coordinate withISSEs and SecOps to validate control implementations

Develop SecurityAssessment Plans (SAPs) and support SAR coordination

Draft supplychain risk management plans

Support theCybersecurity Architect with RMF strategic planning

Qualifications

Required:

Active Secret orTS clearance

3–5 years ofRMF/ATO experience within DoD or federal environments

Hands-onexperience with eMASS

Working knowledgeof NIST SP 800-53r5 and DoD RMF processes

Demonstratedability to independently author SSPs and manage POA&Ms

Required Certification:

DoD 8140.03M DCWFBasic tier certification — CEH

Desired Certification:

DoD 8140.03M DCWFIntermediate tier certification — one of: CEH(P), RCCE Level 1, Cloud+, CPTE,FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+

Required Education:

DoD 8140 InterimEducation Options

Desired Education:

Bachelor’s degreein Computer Science, Cybersecurity, Data Science, Information Systems,Information Technology, or Software Engineering

Desired:

Experience witheMASSer or similar RMF automation tooling

Exposure tocloud-hosted or hybrid system authorization boundaries

Familiarity withthe DoD RMF Knowledge Service