Responsibilities

• Develop and maintain RMF A&A packages for our clients
• Work closely with stakeholders to gather information and ensure that RMF A&A packages meet their needs
• Conduct security assessments of information systems to identify vulnerabilities and risks
• Strong oral and written communication skills; write clear and concise reports detailing assessment findings and recommendations for risk mitigation
• Collaborate with other developers to ensure that RMF A&A packages are integrated smoothly with other systems
• Keep up-to-date with the latest trends and technologies in RMF A&A package development
• Must meet DoD 8570 Information Assurance Managerial Level II certification requirements at time of employment

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field
• Three plus (3+) years of experience in RMF A&A package development
• Top Secret Security Clearance
• Strong knowledge of NIST SP 800-53, NIST SP 800-37, and other relevant cybersecurity standards and guidelines
• Experience with the Enterprise Mission Assurance Support Service (eMASS) or managing DoD and DoN IA Portfolios is a plus
• Prefer a working knowledge of STIG Viewer, Vulnerability Remediation Asset Manager (VRAM) reporting and understanding of Compliance Task Orders (CTO)s
• Knowledge of RDT&E and/or tactical systems
• Knowledge of Interim Authority to Test (IATT)
• Ability to communicate effectively with all levels of employees and outside contacts
• Strong interpersonal skills and good judgment with the ability to work alone or as part of a team
• Experience with security assessment tools such as Nessus
• Experience with security control implementation and testing
• Strong problem-solving skills and attention to detail
• Ability to work independently as well as in a team environment