Cybersecurity RMF Specialist
Darkwolfsolutions · Herndon, VA
About this role
**Dark Wolf** is seeking a **Cybersecurity RMF Specialist** to serve as the primary regulatory and technical authority for the authorization of mission-critical software in **DoD Impact Level 5 (IL5)** and **Impact Level 6 (IL6)** enclaves. You will independently manage the end-to-end **Risk Management Framework (RMF)** process, including development of a comprehensive **Body of Evidence (BoE)** for **Continuous Authorization to Operate (cATO)**. You’ll act as the principal liaison between **Platform Engineers**, **Developers**, and **Government stakeholders** (including **Security Control Assessors (SCA)** and **Authorizing Officials (AO)**) to ensure rigorous cybersecurity application across a DoD operational ecosystem. --- ### Key Responsibilities - Lead the end-to-end RMF process for **DoD IL5/IL6**, managing **eMASS** security controls, artifacts, **POA&Ms**, and authorization documentation to maintain compliance and security posture. - Manage **Continuous Monitoring (ConMon)** activities and security artifacts, including maintaining/reviewing/validating/submitting **STIG checklists**, architecture/network diagrams, HW/SW inventories, **PPSM** documentation, **SBOMs**, container image inventories, and supporting evidence to the **DHA Cybersecurity Team**. - Coordinate **ACAS/SAST** vulnerability scans, **IAVA** compliance, and remediation efforts with the **DHA Cybersecurity Team** and **Platform Engineers**; track vulnerabilities and compliance findings through remediation and closure. - Translate **DISA STIG**, **SRG**, and **NIST 800-53** requirements into actionable technical requirements; partner with Platform/Engineering to implement security controls via **Infrastructure as Code (IaC)** and perform security control assessments. - Serve as the primary cybersecurity liaison for government stakeholders; support **CCB/change requests** and brief DHA cybersecurity teams and senior leadership on security posture, compliance status, risks, remediation efforts, and the path to continued authorization. --- ### Required Qualifications - **5+ years** of relevant cybersecurity experience with a focus on **DoD RMF** and **Impact Level 5/6** authorizations. - Direct experience with **DoD Cloud Service Provider** ecosystems (e.g., **AWS GovCloud**). - Proven ability to independently coordinate with government **Security Control Assessors (SCA)** and mission partners. - Experience with **eMASS** and the **Enterprise Mission Assurance Support Service** for managing DoD system records. - Knowledge of security scanning tools (e.g., static/dynamic analysis). - Experience with **Atlassian** tools such as **Jira** and **Confluence**. - Confidence presenting to senior leadership and conducting/guiding meetings. - **DoD 8140/8570 IAM Level III** certification (e.g., **CISSP**, **CISM**, or **GSLC**). - **US Citizenship** and an active **DoD Secret** security clearance. - **B.A./B.S.** in Information Security, Computer Science, or related discipline. --- ### Desired Qualifications - Experience with **DoD Architecture Framework (DoDAF)**. - Experience with **Cloud Computing Security Requirements Guide (CC SRG)**. - Experience with **DoD DevSecOps Fundamentals Playbook**. - Experience with DevSecOps platforms such as **GitLab** or **GitHub**. - Understanding of container-based application tools (e.g., **Docker**, **Docker Compose**, **Kubernetes**). - Understanding of **Continuous ATO (cATO)** concepts and integrating automated security testing
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.