3 дня назад
Cybersecurity Engineer / RMF Specialist
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Cybersecurity Engineer / RMF Specialist (NIST/DoD Cybersecurity): Developing and maintaining RMF documentation and security artifacts for federal building and facility control systems with an accent on system categorization, vulnerability assessment, and Authority to Operate support. Focus on translating technical input into audit-ready deliverables, tracking POA&M remediation, and coordinating compliance activities across engineers, system owners, and government cybersecurity stakeholders.
Location: Columbus, Ohio, United States; on-site. Must be a US citizen with the ability to obtain and maintain a Secret security clearance.
Company
delivers engineering and cybersecurity support for federal customers and complex mission environments.
What you will do
- Develop and maintain RMF documentation and security artifacts, including system diagrams, categorization documents, control implementation write-ups, and plans of action.
- Collect and organize technical information from system owners, engineers, and operations staff into audit-ready deliverables.
- Support system categorization, risk assessments, STIG and security control checklists, and compliance tracking.
- Review vulnerability scan results, develop POA&Ms, and track remediation through closure.
- Maintain inventories of in-scope hardware, software, and documentation.
- Coordinate with government cybersecurity teams, program managers, security officers, engineers, and vendors on recurring customer deliverables.
Requirements
- US citizenship and eligibility to obtain and maintain a Secret security clearance.
- DoD 8140.03 IAM Level I certification, such as Security+ CE.
- Role-based computing environment certification must be obtained before privileged access within 180 days of the first day.
- Hands-on experience supporting RMF in a federal, DoD, or similarly complex environment.
- Experience producing security documentation reviewed by a government ISSM, auditor, or authorizing official.
- Knowledge of FIPS 199/200, NIST 800-53, NIST 800-82, CNSSI 1253, ACAS, and SCAP, plus strong written communication and organizational skills.
Nice to have
- Experience maintaining artifacts in eMASS or a similar RMF package management system.
- Experience with OT/ICS/SCADA or facility control systems, including building automation and advanced metering.
- Knowledge of the Purdue Enterprise Reference Architecture, FedRAMP, Zero Trust, privacy documentation, or contingency plan artifacts.
- Experience supporting ATO or ATC efforts from start to finish and prior DLA customer experience.
Culture & Benefits
- On-site work as part of a small cyber team.
- Close collaboration with remote government cybersecurity stakeholders and engineering staff.
- Values centered on helpfulness, honesty, humility, continuous improvement, and mission focus.
- Support for non-traditional career paths, including military service, technical training, and industry certifications.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
4 дня назад
Cyber Security Engineer (AWS)
4 дня назад
CISO (Cybersecurity)
4 дня назад
Information Systems Security Engineer
150 000 - 190 000$
4 дня назад
Information System Security Officer (Cybersecurity)
120 000 - 165 000$
4 дня назад
Security Controls Assessor (Cybersecurity)
150 000 - 168 000$
4 дня назад
Information Systems Security Engineer (Cybersecurity)
119 405 - 145 664$