risk management framework (rmf) specialist

J5 Consulting

<div>J5 Consulting is a Maryland based company established in 2006 to provide computing and consulting services for government and commercial entities. Our services improve Information System networking performance and compliance and protect electronic assets from loss and compromise. We welcome your application to receive consideration for the following position.
Introduction:<div>
The Sponsor&rsquo;s organization provides technical services to other Sponsor organizations in the areas of: 
<ul><li>Desktop hardware to include workstations, printers, multi-function devices, monitors, desktop peripherals, large displays, webcams, and a variety of other hardware devices.</li><li>Voice to include networks, VoIP, analog, and digital implementations.</li><li>Audio and video to include desktop VTC, integrated audio and video conference room setups (cameras, speakers, A/V switches, control panels, etc.), and multi-VTC integrated room setups.</li></ul> 
The Contractor shall be required to provide Certification and Accreditation support to advise and assist the stakeholders with the Lifecycle Assessment and Authorization (A&amp;A) process, and develop a Systems Security Plan (SSP).</div> 
Required skills and demonstrated experience: 
<ul><li>
Bachelor&rsquo;s degree in management information systems, information assurance, computer engineering, or other closely related IT and cybersecurity discipline or equivalent work experience</li><li>
Demonstrated experience in the Risk Management Framework (RMF) methodology.</li><li>
Demonstrated experience managing document repositories and databases.</li><li>
Demonstrated experience in the use of process tracking and document control software</li><li>
Demonstrated experience with writing, communications, and briefing skills.</li><li>
Demonstrated experience with technical guidance and oversight both to technical and non-technical, senior level personnel.</li><li>
Demonstrated experience organizing, planning and prioritizing multiple tasks to complete work on schedule.</li><li>
Demonstrated experience in INFOSEC policies, regulations, and guidance&rsquo;s.</li><li>
Demonstrated experience with cyber risks such as malware, zero-day attacks, denial of service attacks, as well as associated mitigations regarding computer and network devices.
</li><li>Demonstrated pattern of excellent customer service skills and the ability to collaborate with customers at all levels.</li></ul>
Highly desired, though not required, include: 
<ul><li>
Demonstrated experience with the Sponsor&rsquo;s A&amp;A process.</li><li>
Certified Information Systems Security Professional (CISSP).</li><li>
Demonstrated knowledge of the Sponsor&rsquo;s standard project cycle.</li><li>
Demonstrated experience with the Sponsor&rsquo;s diverse information technology infrastructure, including operating systems, major application systems, and network architecture.</li></ul>
__________________________________________________________________________________
US Citizenship:<ul><li>
This position requires US Citizenship. Verification of US Citizenship to meet federal government security requirements will be confirmed.
</li></ul>Security Clearance:<ul><li>
The successful candidate must have an active U.S. Government Top Secret Security Clearance with a Full Scope Polygraph.</li><li>
Clearance Verification: This position requires successful verification of the stated security clearance to meet federal government customer requirements. You will be asked to provide clearance verification information prior to an offer of employment.</li></ul>
Travel:<ul><li>
 This position is expected to be onsite. The position will be located within the Washington Metropolitan Area (WMA). Local travel/POV will be on an as needed basis, within the local place of performance.</li></ul> 
Join J5 Consulting and Grow Your Cybersecurity Career
At J5, we&rsquo;re a team of innovators protecting organizations from evolving cyber threats. With 18+ years of success in government and commercial sectors, we offer meaningful opportunities to grow your career.
Enjoy comprehensive benefits, including:
<ul><li>100% employer-paid health coverage</li>
<li>a 6% 401(k) match</li>
<li>PTO</li>
<li>tuition reimbursement</li>
<li>bonuses</li>
<li>professional development, and more.</li>
</ul>
Ready to make an impact? Explore our open positions and apply today.
N2sEjICTxI</div>

Assessment & Authorization Specialist

Booz Allen Hamilton

<div>Security Control Assessor
The Opportunity:
As a systems security and network security engineer, you will identify the appropriate tools, systems, and applications needed to assess vulnerabilities and recommend the best solution and security strategy.
On our team, you&rsquo;ll assess a variety of network and security devices and applications in accordance with NIST 800-53 and NIST 800-37 standards. You&rsquo;ll use your curiosity for technology and market trends to further research and develop security solutions. Using your knowledge and experience, you&rsquo;ll assess security threats and implement infrastructure controls.
In this role, you&rsquo;ll have impact on the mission by supporting accreditation and authorization packages for both new and existing systems. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers.
What You&rsquo;ll Work On:<ul><li>
Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.</li><li>
Implement infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.</li><li>
Perform risk and vulnerability assessments in network, system, and application areas.</li><li>
Leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise.</li></ul>
Join us. The world can't wait.
You Have:<ul><li>
Experience utilizing NIST 800-53 security controls</li><li>
Experience with NIST 800-37 Risk Management Framework (RMF) requirements</li><li>
Experience supporting system authorization activities, including the development and maintenance of security documentation such as System Security Plans (SSPs) and Plans of Action and Milestones (POA&amp;Ms)</li><li>
Experience monitoring system security posture and identifying risks, vulnerabilities, and compliance gaps</li><li>
Experience tracking and managing POA&amp;Ms and coordinating remediation activities with system stakeholders</li><li>
Experience assessing the security impact of system changes and supporting configuration and change management processes</li><li>
Experience preparing systems for security assessments, audits, and Authorizing Official reviews</li><li>
Ability to support continuous monitoring activities, including vulnerability management and security reporting, and serve as a security liaison between system teams, cybersecurity operations, and governance bodies</li><li>
Top Secret clearance</li><li>
HS diploma or GED and 8+ years of experience with Information Assurance (IA), or Bachelor&rsquo;s degree and 5+ years of experience with Information Assurance (IA)</li></ul>
Nice If You Have:<ul><li>
Experience with operational technology and industrial control systems</li><li>
Master&rsquo;s degree in Information Systems</li><li>
CompTIA Advanced Security Practitioner (CASP) or Certified Information Systems Security Professional (CISSP) Certification</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.
Work Model 
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.<ul><li>
Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.</li><li>
Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.</li><li>
Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Security Control Assessor

cFocus Software Incorporated

<div><h1 class="jobSectionHeader">Vulnerability Analyst II &ndash; Job Description</h1>
Position Title: Vulnerability Analyst II 
Program: SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader">
Position Summary</h2>
The Vulnerability Analyst II provides cybersecurity risk, vulnerability management, and compliance support services in alignment with the SBA Enterprise Cybersecurity Services (ECS) RFQ Task Area 3.5.2. The position supports the SBA Risk Management Framework (RMF), FISMA compliance initiatives, Information System Continuous Monitoring (ISCM), vulnerability management, controls assessment activities, audit support, and continuous monitoring operations across enterprise systems and cloud environments. The analyst performs vulnerability assessments, supports POA&amp;M development, validates security controls, coordinates remediation efforts, and assists Information System Security Officers (ISSOs) and system owners with maintaining compliant and secure systems.<h2 class="jobSectionHeader">
Essential Duties and Responsibilities</h2><ul><li>
Perform enterprise vulnerability assessments and compliance scans using SBA-approved tools such as Tenable Security Center (SC), Nessus, and Microsoft TVM.</li><li>
Review identified vulnerabilities, assess impact and risk, and provide remediation recommendations for operating systems, applications, network devices, and cloud environments.</li><li>
Support continuous monitoring and Risk Management Framework (RMF) activities in accordance with NIST SP 800-37, NIST SP 800-53 Rev. 5, and NIST SP 800-53A.</li><li>
Assist with the creation, maintenance, and review of cybersecurity documentation including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&amp;Ms), Configuration Management Plans (CMPs), and contingency documentation.</li><li>
Support control assessments and validation activities by documenting NIST 800-53A Determine If Statements (DISs) and mapping vulnerabilities to applicable controls.</li><li>
Conduct vulnerability scanning activities every 72 hours across workstations, servers, routers, switches, and cloud-based assets in accordance with SBA requirements.</li><li>
Monitor CISA Known Exploited Vulnerabilities (KEV) listings and Binding Operational Directives (BODs) to identify and report emerging risks.</li><li>
Track zero-day vulnerabilities, coordinate remediation activities, and provide ad hoc reporting to leadership and stakeholders.</li><li>
Generate weekly vulnerability reports, dashboards, and briefing materials for ISSOs, system owners, and management.</li><li>
Assist with audit preparation and support activities involving IG, GAO, internal auditors, and external assessors.</li><li>
Maintain scanning infrastructure including scanner deployment, configuration, plugin updates, scan repositories, and vulnerability management SOPs.</li><li>
Support FedRAMP Continuous Monitoring (CONMON) activities by reviewing vulnerability reports and assessing vendor remediation activities.</li><li>
Participate in change management, security operations meetings, and enterprise cybersecurity coordination activities.</li><li>
Ensure all deliverables are complete, accurate, aligned with agency templates, and delivered within required timeframes.</li></ul><h2 class="jobSectionHeader">
Minimum Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or related discipline. Additional years of experience may substitute for degree requirements.</li><li>
3&ndash;6 years of experience supporting vulnerability management, cybersecurity compliance, RMF, or information assurance activities in a federal environment.</li><li>
Experience performing vulnerability assessments and remediation activities using Tenable SC/Nessus or equivalent tools.</li><li>
Knowledge of FISMA, NIST RMF, NIST SP 800-53 Rev. 5, NIST SP 800-53A, NIST SP 800-137, and related federal cybersecurity standards.</li><li>
Experience supporting POA&amp;M management, security assessments, continuous monitoring, and audit response activities.</li><li>
Working knowledge of Windows, Linux/Unix, network infrastructure, cloud platforms, and enterprise security technologies.</li><li>
Strong written and verbal communication skills with the ability to produce technical documentation and executive-level reports.</li><li>
Ability to analyze security findings, prioritize risks, and coordinate remediation with technical stakeholders.</li></ul><h2 class="jobSectionHeader">
Preferred Certifications</h2><ul><li>
CompTIA Security+</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
Certified Ethical Hacker (CEH)</li><li>
GIAC Security Certifications (GSEC, GPEN, or similar)</li><li>
Tenable Certified Professional or equivalent vulnerability management certification</li></ul>
Gupkg0JOaj</div>

SBA - Vulnerability Analyst II

<div><h1 class="jobSectionHeader">Security Control Assessor &ndash; Job Description</h1>
Position Title: Security Control Assessor 
Program: SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader">
Position Overview</h2>
The Security Control Assessor (SCA) shall provide cybersecurity assessment, authorization, and compliance support services for the U.S. Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program.<h2 class="jobSectionHeader">
Key Responsibilities</h2><ul><li>
Conduct independent security control assessments in accordance with NIST SP 800-53 Rev. 5 and NIST SP 800-53A methodologies.</li><li>
Evaluate management, operational, and technical security controls for federal information systems and cloud environments.</li><li>
Support the SBA Risk Management Framework (RMF) lifecycle including assessment, authorization, continuous monitoring, and ongoing authorization activities.</li><li>
Develop and maintain Security Assessment Reports (SARs), Security Assessment Plans (SAPs), POA&amp;Ms, risk findings, and remediation recommendations.</li><li>
Review and validate cybersecurity documentation including System Security Plans (SSPs), Configuration Management Plans (CMPs), Incident Response Plans, ISCPs, and architecture diagrams.</li><li>
Perform vulnerability assessment validation activities and verify remediation efforts for identified weaknesses and deficiencies.</li><li>
Support Information System Continuous Monitoring (ISCM) activities and ongoing authorization (OA) evaluation support.</li><li>
Assess compliance with FISMA, OMB Circular A-130, NIST guidance, FedRAMP requirements, and agency-specific cybersecurity policies.</li><li>
Support audit readiness activities for Inspector General (IG), GAO, FISMA, and internal cybersecurity audits.</li><li>
Assist with High Value Asset (HVA) assessment support activities in alignment with CISA and OMB guidance.</li><li>
Coordinate with ISSOs, ISSMs, system owners, and engineering teams to evaluate cybersecurity risks and remediation strategies.</li><li>
Support enterprise vulnerability management and risk reporting activities.</li><li>
Participate in cybersecurity governance meetings, compliance reviews, and technical assessment briefings.</li><li>
Document assessment findings, technical analysis, and recommendations with clear and concise reporting suitable for executive and technical stakeholders.</li><li>
Support development of cybersecurity metrics, dashboards, and compliance reporting artifacts.</li><li>
Ensure all assessment deliverables are peer reviewed, Section 508 compliant, and delivered in accordance with SBA-defined quality standards and timelines.</li></ul><h2 class="jobSectionHeader">
Required Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Assurance, Information Technology, Computer Science, Engineering, or related field.</li><li>
Minimum of six (6) years of experience supporting federal cybersecurity assessment, compliance, RMF, or security authorization activities.</li><li>
Minimum of four (4) years of experience conducting security control assessments, vulnerability assessments, or cybersecurity compliance evaluations.</li><li>
Demonstrated expertise in NIST RMF processes, NIST SP 800-53 Rev. 5, NIST SP 800-53A, and FISMA compliance requirements.</li><li>
Experience developing Security Assessment Reports (SARs), Security Assessment Plans (SAPs), POA&amp;Ms, and related accreditation documentation.</li><li>
Experience supporting continuous monitoring, ongoing authorization (OA), and cybersecurity audit activities.</li><li>
Knowledge of FedRAMP security assessment and continuous monitoring requirements.</li><li>
Experience using cybersecurity assessment, vulnerability management, and governance/risk/compliance (GRC) tools.</li><li>
Strong analytical, technical writing, and communication skills.</li><li>
Relevant cybersecurity certifications such as CAP, CISSP, CISA, Security+, CEH, or equivalent preferred.</li><li>
Ability to obtain and maintain a Moderate Risk background investigation and eligibility for higher-level clearances if required.</li></ul><h2 class="jobSectionHeader">
Desired Experience</h2><ul><li>
Experience supporting civilian federal agencies such as SBA, DHS, or CISA.</li><li>
Experience supporting FedRAMP cloud environments including Microsoft Azure, AWS, Microsoft 365, and SaaS platforms.</li><li>
Experience supporting enterprise cybersecurity metrics, dashboards, and automated compliance reporting.</li></ul>
PZHe7BkzAJ</div>

SBA - Security Control Assessor

DCS Corp

<div><div>DCS Corp is seeking a Senior Information Systems Security Officer (ISSO) to support our customer at Nellis AFB, NV.
****This is a temporary position expected to last approximately 26 weeks, though the assignment may conclude sooner based on contract or customer needs.****
Essential Job Functions:
Ensure the confidentiality, integrity, and availability of classified Information Systems (IS) and data using Air Force Approved network engineering, information security standards and approved industry best practices.
Perform upgrades, security patches, back-ups, account maintenance, and access control maintenance.
Assist the customer with developing and sustaining enterprise Risk Management Framework (RMF) accreditation packages.
Providing Information System Security Operations support, integration services, technical assessments, and solutions to enable cybersecurity.
Apply Secure Technical Implementation Guide (STIG) best practices to classified and unclassified. information systems, networking equipment, and applicable software and applications.
Perform vulnerability risk assessment analysis to support authorization and accreditation.
Assist customer preparing and reviewing documentation to include System Security Plans (SSPs), Risk Assessment Reports, Authorization to Operate (ATO) packages, policies, and Security Controls. Traceability Matrices (SCTMs) and upload documents into eMASS or other databases.
Conduct periodic reviews and evaluations of required IS policies and procedures.
Support IS Security inspections, tests, and reviews.
Perform generation and collection of audit logs for IS.
Required Skills:
Due to the sensitivity of customer related requirements, US Citizenship is required.
A BS Degree in Computer Science or relevant field with at least 12 years of work experience.
Current Secret Clearance.
Must be compliant with DoD 8140.03 with CASP or CISSP certification.
Desired Skills:
Demonstrated Cybersecurity Analyst foundation with strong working knowledge and understanding of Cyber technologies, RMF process.
Strong foundation and working knowledge with Nessus, SCAP Compliance Checker, STIGs, ACAS, eMASS, hardening systems and applying IA controls.
Excellent verbal and written communication skills along with customer interaction and presentation capabilities required.
Familiarity with DoD system security accreditation processes and tools.
Experience as a Unix System Administrator, Cisco Network Administrator or Windows System Administrator background.</div></div>

Information Security Systems Officer

<div>Cloud Security Engineer
The Opportunity:
Define, communicate, and implement cybersecurity architecture and administration processes for Amazon Web Services (AWS) and Microsoft Azure cloud environments across multiple network domains. Collaborate across our cloud infrastructure delivery team and with stakeholders using an Agile process to design, implement, verify, and continuously monitor cloud solutions across multiple domains. Develop Risk Management Framework (RMF) Body of Evidence artifacts, including system security plans and cybersecurity concept of operations documents for Cloud environments in alignment with existing RMF packages. Support assessment and authorization activities to achieve and maintain Authority to Operate (ATO) on multiple networks. Evaluate enhancements to Cloud environments against RMF controls and DoD Security Technical Implementation Guidance (STIG) requirements. Support data capture and configuration within tools to enable achievement of the organization&rsquo;s Assessment and Authorization (A&amp;A) objectives. Work without considerable direction. Mentor and supervise team members, as needed.
You Have:<ul><li>
4+ years of experience securing computer systems, performing DoD authorization activities, developing a body of evidence for RMF, and writing security plans</li><li>
4+ years of experience with secure IT architecture and computing hardware and software</li><li>
Experience working with Cloud technologies, including AWS, Azure, or Infrastructure as a Service</li><li>
Experience with Microsoft Sentinel and Defender for incident monitoring and endpoint security</li><li>
Experience with scripts, PowerShell, and Bash to provide automated scanning or monitoring solutions</li><li>
Experience supporting security reviews of software and system releases within a DevSecOps framework and supporting recurring path-to-production software and system release activities</li><li>
Experience with terminology, processes, and regulations of IT system A&amp;A for the RMF</li><li>
Top Secret clearance</li><li>
HS diploma or GED</li><li>
Ability to obtain a DoD 8570 or 8140 IAT Level II Certification within 90 days of hire date</li></ul>
Nice If You Have:<ul><li>
Experience assessing and authorizing network connections between on-premise and cloud</li><li>
Experience planning, implementing, and managing continuous monitoring solutions and working within an Agile-based project management framework</li><li>
Experience with Red Hat Enterprise Linux (RHEL) or Windows system administration</li><li>
Experience with code management tools such as Git or GitLab in a team setting</li><li>
Experience with the Army, DoD, or Intelligence Community (IC) Information Assurance (IA) or Information Systems</li><li>
Experience in Information System Security Engineer (ISSE) or Information System Security Officer (ISSO) roles</li><li>
Knowledge of terminology and federal regulations related to the specification, development, acquisition, and maintenance of IT systems</li><li>
Ability to work independently and as an integrated member of a project team</li><li>
Possession of excellent verbal and written communication skills</li><li>
TS/SCI clearance</li></ul>
Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.
Work Model 
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.<ul><li>
Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.</li><li>
Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.</li><li>
Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.</li></ul>
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Cloud Security Engineer

AMERICAN SYSTEMS

<div>Overview:
<div>
AMERICAN SYSTEMS is an employee-owned federal government contractor supporting national priority programs through our strategic solutions in the areas of Information Technology, Test &amp; Evaluation, Program Mission Support, Engineering &amp; Analysis, and Training.</div>
Responsibilities:
<div>
Provide knowledge and experience with RDT&amp;E and Business IT systems and the phases of Certification and Accreditation (C&amp;A) process.
</div><div>Satisfies provisions of CNSS no. 4016 (Risk Analyst), Intermediate Level, but is not required to actually hold the certificate.
</div><div>Demonstrate in-depth knowledge of all C&amp;A subject areas with in-depth familiarity and understanding of Navy IT sites, systems and infrastructure; applies Navy C&amp;A guidance to Navy C&amp;A efforts.
</div><div>Work with Navy C&amp;A efforts as a Navy Validator.</div><div>
Develop and maintain System Security Plans (SSP), Contingency Plans, Privacy Impact Assessments, Certification Reports, Accreditation Reports, Plan of Action &amp; Milestones (POA&amp;M), and other C&amp;A documentation.
</div><div>Work closely with all levels of personnel involved in IT operations and technical aspects of systems.</div>
Qualifications:
<ul><li>Experience working within the Team SUB environment</li><li>
7 or more years of experience with RDT&amp;E and Business IT systems and the phases of Certification and Accreditation (C&amp;A) process. Required: Qualification as a Level III Navy Qualified Validator (NQV) as defined by DoD Instruction 8510.01 - Risk Management Framework (RMF) for DoD Information Technology (IT).</li><li>
Bachelor's level degree in Computer Science or in a technical or managerial related field.
</li><li>Active Secret level security clearance</li><li>
U.S. Citizenship Required for the purposes of obtaining/holding a U.S. security clearance</li></ul>
EEO Statement: EEO Race/Sex/Disability Status/Veteran Status</div>

Navy Qualified Validator III

Search 10000+ Risk management framework (rmf) specialist jobs near you this May. New roles added regularly across leading industries. Apply today.