Summary:

An RMF Cybersecurity Engineer must have a thorough understanding of the RMF process and familiarity with IT/network technologies. Thus, the analyst is expected to provide technical support to perform Navy RMF validator functions, independently assessing and validating that systems have correctly implemented the approved security controls and conformed to Navy RMF package processing requirements.

Applicants must meet the requirement of U.S. Citizenship and have a SECRET security clearance,

Primary Skills & Responsibilities:

• Experience and thorough understanding of Risk Management Framework (RMF) lifecycle to include a working knowledge of the each of the stages within the process
• Support client risk management activities including Security Test and Evaluations (ST&E), system documentation, authorizations, risk assessments, third party audits, compliance with NIST 800-53, and threat assessments in accordance with RMF lifecycle and processes.
• Plan and monitor security control implementation for the protection of networks, enclaves, and information systems.
• Generate and interpret ACAS scans to identify system vulnerabilities and monitor remediation efforts or mitigation strategies.
• Working knowledge and experience implementing and evaluating manual Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), and SCAP Compliance Checker (SCC).
• Working knowledge of common assessment & authorization (A&A) application platforms e.g. eMASS, CSAM, MCCAST etc.
• Five (5) years’ experiences with cybersecurity methodologies, tools and best practices, two (2) years developing or operating CND software tools supporting vulnerability analysis, intrusion detection, malware analysis, VRAM, ACAS, DISA STIGS, and HBSS.
• Three (3) years’ experience supporting C&A/A&A processes.

Education/Certifications/Clearance:

• BS in Information Systems, Information Assurance, Computer Science, or equivalent technical degree or 5 years of relevant experience.
• NQV Level II certification preferred.
• Security+, Network+, or other IAM Level II certifications required.

An active Secret Clearance