Cybersecurity RMF Specialist

<div>

<p><strong>Dark Wolf</strong> is seeking a <strong>Cybersecurity RMF Specialist</strong> to serve as the primary regulatory and technical authority for the authorization of mission-critical software in DoD Impact Level 5 (IL5) and Impact Level 6 (IL6) enclaves. This role is responsible for the independent management of the end-to-end Risk Management Framework (RMF) process, including the development of a comprehensive Body of Evidence (BoE) for Continuous Authorization to Operate (cATO). The successful candidate will act as the principal liaison between Platform Engineers, Developers, and Government stakeholders - including Security Control Assessors (SCA) and Authorizing Officials (AO) - to ensure the rigorous application of cybersecurity principles within a DoD operational ecosystem. This position requires a candidate capable of navigating complex cloud security requirements independently to achieve and maintain software readiness for national security systems.</p>

<p><strong>Key Responsibilities:</strong></p>

<ul>

<li>Leading the end-to-end RMF process specifically for DoD IL5 and IL6 environments, managing eMASS security controls, Artifacts, POA&Ms, and authorization documentation to maintain system compliance and security posture</li>

<li>Managing Continuous Monitoring (ConMon) activities and security artifacts, including maintaining, reviewing, validating, and submitting STIG checklists, architecture/network diagrams, HW/SW inventories, PPSM documentation, SBOMs, container image inventories, and supporting evidence to the DHA Cybersecurity Team</li>

<li>Coordinating ACAS/SAST Vulnerability scans, IAVA compliance, and remediation efforts with DHA Cybersecurity Team and Platform Engineers, tracking vulnerabilities and compliance findings through remediation and closure</li>

<li>Translating DISA STIG, SRG, and NIST 800-53 requirements into actionable technical requirements, partnering with Platform/Engineers to implement security controls through Infrastructure as Code (IaC) and performing security control assessments</li>

<li>Serving as the primary cybersecurity liaison for government stakeholders, supporting CCB/change requests and briefing DHA cybersecurity teams and senior leadership on system security posture, compliance status, risks, remediation efforts, and the path to continued authorization</li>

</ul>

<p><strong>Required Qualifications:</strong></p>

<ul>

<li>5+ years of relevant Cybersecurity experience, with a focus on DoD RMF and Impact Level 5/6 authorizations</li>

<li>Direct experience with DoD Cloud Service Providers (e.g. AWS Govcloud) ecosystems</li>

<li>Proven ability to independently lead coordination with government Security Control Assessors (SCA) and mission partners</li>

<li>Experience with eMASS and the Enterprise Mission Assurance Support Service for managing DoD system records</li>

<li>Knowledge of security scanning tools (e.g., Static Analysis, Dynamic Analysis, etc.)</li>

<li>Experience with using Atlassian tools such as Jira and Confluence</li>

<li>Confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders</li>

<li>DoD 8140/8570 IAM Level III Certification (e.g., CISSP, CISM, or GSLC)</li>

<li>US Citizenship and an active DoD Secret security clearance</li>

<li>B.A. or B.S. Information Security, Computer Science or related discipline</li>

</ul>

<p><strong>Desired Qualifications:</strong></p>

<ul>

<li>Experience with the DoD Architecture Framework (DoDAF)</li>

<li>Experience with Cloud Computing Security Requirements Guide (CC SRG)</li>

<li>Experience with DoD DevSecOps Fundamentals Playbook</li>

<li>Experience with DevSecOps Platforms such as GitLab or GitHub</li>

<li>Understanding of container based application development tools (e.g., Docker, Docker Compose, Kubernetes)</li>

<li>Understanding of "Continuous ATO" (cATO) concepts and the integration of automated security testing into DevSecOps pipelines</li>

</ul>

<p> </p>

<p>This role requires a hybrid presence in Northern Virginia. The compensation for this role is estimated to be between $120,000-$150,000, commensurate on experience. </p>

</div>

<p>We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.<br><br>In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.</p>

<p>We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.<br> </p>