Cybersecurity Engineer (RMF)

Location: On-site in Aberdeen, Maryland, United States

What you will do

• Provide on-site cybersecurity engineering and DoD Risk Management Framework support for Aberdeen Test Center information systems, including LAN, logically isolated, secure test, and test and evaluation networks.
• Support RMF categorization, boundary identification, security-control selection, implementation, assessment, and authorization-to-operate activities.
• Prepare and maintain RMF lifecycle documentation and evidence for ATO decisions and ongoing authorization.
• Support Security Control Assessor visits, reviews, validation, remediation responses, continuous monitoring, POA&M maintenance, and IAVM activities.
• Review hardware and software baseline changes, assess cybersecurity and interoperability impacts, and support configuration-management and technical control boards.
• Analyze defect and incident reports, reconcile software and hardware information, and support architecture, emerging-technology, and capability-migration activities.

Requirements

• CASP+, now called CompTIA SecurityX, or an equivalent certification accepted under the solicitation.
• At least five years of experience supporting RMF lifecycle reporting and software/hardware reconciliation.
• Experience managing networks across Windows, Linux, and Apple platforms.
• Experience working in unclassified and classified environments, including Secret environments.
• Active Secret personnel security clearance with a favorably adjudicated Type 3 investigation at bid submission.
• Ability to maintain assigned SIPRNet access.
• Meet applicable DoDD 8140.01, DoD 8570.01-M, DFARS 252.239.7001, and AR 25-2 baseline certification requirements at award.

Culture & Benefits

• On-site work supporting Aberdeen Test Center information systems.
• The position supports both unclassified and classified operational environments.