Cybersecurity Specialist (RMF)

Location: Aberdeen, Maryland, United States; surge support is activated by the Government for Top Secret environments.

Company

hirify.global provides support for government cybersecurity and security authorization activities involving classified systems.

What you will do

• Conduct authorization lifecycle analysis and documentation for Top Secret environments in accordance with ICD 503 and relevant government direction.
• Support system categorization, boundary definition, security-control selection and implementation, and control assessment and verification.
• Develop, maintain, and reconcile authorization artifacts, assessment evidence, and lifecycle reporting.
• Support SCA visits, security reviews, control-weakness identification, and remediation follow-up.
• Execute continuous security-control monitoring, POA&M maintenance, and IAVM activities.
• Review baseline changes, configuration management, defect reviews, hardware/software reconciliation, and sensitive technical findings reporting.

Requirements

• CASP+, now called CompTIA SecurityX, or an equivalent certification accepted under the solicitation.
• At least five years supporting RMF lifecycle reporting and software/hardware reconciliation, including at least three years supporting lifecycle documentation for Top Secret environments.
• Experience managing networks across Windows, Linux, and Apple platforms and across unclassified and classified environments.
• Active Top Secret personnel security clearance supported by a favorably adjudicated Type 5 investigation when surge support is required.
• Meet applicable DoDD 8140.01, DoD 8570.01-M, DFARS 252.239.7001, and AR 25-2 baseline certification requirements at award.

Culture & Benefits

• Work supports classified government environments and may be performed when the Government activates the optional surge requirement.
• Activities follow approved classified-system processes and applicable government security requirements.