← Back to Jobs
Employee
Technology
AR
NAVSEA Risk Management Frame (RMF) Information Systems Security with Security Clearance
Quick Overview
Salary
$87.2k - $151.6k/yr
Seniority
Mid Senior
Employment type
Employee
Work mode
Hybrid
Location
Newport, RI, United States
Posted
22 hours ago
Job Description
Responsibilities Support the NUWCDIVNPT in a Junior-Mid RMF ISSE Role and perform tasks related to Assess and Authorize (A&A) to maintain Authorizations to Operate (ATOs) systems (i.e., applications, networks, devices), and perform the following:
- Provide a disciplined, structured, and flexible process for managing security and privacy risk that includes information security categorization; control selection, implementation, and assessment; system and common control authorizations; and continuous monitoring.
- Become familiar with the system/site by reviewing the Assessment and Authorization (A&A) System Security Plan for existing systems; identify any issues with the Security Plan and Procedures; execute the Security Assessment Plan and process Security Test Report; review POA develop/perform Risk Assessment analysis.
- Keep abreast of and provide the team updated information on Navy RMF policies and procedures. Review DoD, DON, NAVSEA CS-related documentation (i.e., RMF Process Guide, Navy SCA Risk Assessment Guide, DoN Standard Operating Procedures, NAVSEA Business Rules).
- Be comfortable conducting independent security control assessments in accordance with NIST SP 800-53, 800-53A, CNSSI 1253, and the Risk Management Framework (RMF) described in NIST SP 800-37.
- Clearly articulate requirements and other information in written documentation such as Security Plan, Contingency Plan, Contingency Plan Test, Business Impact Analysis, etc.
- Provide guidance and training in eMASS to team members.
- Demonstrate strong organizational and time-management skills: multitasking, working individually and with a team, having a positive attitude, being self-motivated and reliable, being trustworthy, having strong interpersonal and diplomatic skills, and being able to handle stress in a professional manner.
- Attend stakeholder meetings, capture and track action items, and follow up with stakeholders to ensure timely completion.
- BS 2-4, MS 0-2
- Minimum 2+ years of professional cybersecurity experience and Risk Management Framework
- Demonstrated expert-level experience with Risk Management Framework
- Experience in RMF policy development, process improvement, and strategy implementation
- Demonstrated efficiency and expert-level experience in RMF package development, including POA&Ms (mitigation statements), Security Plans, Risk Assessments, architecture diagrams, asset inventories, and system/site policies, procedures, and processes
- Must have an 8570.01M IAM/IAT Level II Certificate (Security + at a minimum CAP or CASP /CISSP preferred)
- Knowledge National Institute of Standards and Training Special Publications (NIST SPs) knowledge
- Must be able to manage multiple projects at a time
- Assessment and Authorization (A&A formerly C&A, i.e. RMF and DIACAP respectively)
- Experience with ACAS, STIG OSS Manager, STIGViewer, eMASS
- Knowledge and experience with practices and procedures for CMMI Software Development Level 3 or greater is a plus
- Knowledge in Continuous Monitoring
- Excellent customer service and organization skills
- Excellent oral and written communication skills
- Demonstrated expert-level experience with DISA STIGs and SRGs
- Position requires U.S. Citizenship
- Possess and Maintain an active Secret security clearance
Min: $70,123.69Max: $104,662.23
EEO Statement We are an equal opportunity employer and federal government contractor. We do not discriminate against any employee or applicant for employment as protected by law.
Similar jobs
- VA
Salesforce Project Manager
NewVastika Inc.
United States🇺🇸Hybrid22 hours agoSalesforceScrumAgile+2Technology - SC
Senior Data Analyst
NewCorporation Service Company
Wilmington, DE🇺🇸Remote22 hours agoSQLScrumTableau+2Technology - ST
Enterprise Solutions Engineer with Security Clearance
NewScute Technologies
Annapolis Junction, MD🇺🇸On-site22 hours agoAWSAzureLESS+3Technology - PG
DevOps Engineer - Platform Engineering, Cloud Automation, Hybrid - 70430
NewPRIMUS Global Services Inc.
Charlotte, NC🇺🇸Hybrid22 hours agoDockerShellBash+6Technology - NI
Azure Data Engineer at Major Japanese Bank 1508
NewNSD International, Inc.
Jersey City, NJ🇺🇸Hybrid22 hours agoOracleSQLAzure+1Technology - CS
Java React Developer @ W2
NewCyber Sphere LLC
New York, NY🇺🇸Hybrid22 hours agoAWSJavaReactTechnology