Security Risk Framework Engineer Jobs

1 job found

Today

Cybersecurity Engineer / RMF Specialist

Agile Defense Columbus, OH

Columbus, OH

Today

Full time Cyber Risk Assessment Cyber Security Engineer Cybersecurity Tools

Apply Now

Job Description

Agile Defense is seeking a Cybersecurity Engineer / RMF Specialist to support a federal customer by documenting, assessing, and strengthening security posture of building and facility control systems through the RMF process to support ATO achievement and sustainment.

Responsibilities

Develop and maintain RMF documentation and security artifacts, including system diagrams, categorization documents, control implementation write-ups, and plans of action
Collect, consolidate, and organize technical inputs from system owners, engineers, and operations staff into audit-ready deliverables
Support system categorization and risk assessment by preparing required documentation and tracking stakeholder inputs
Review vulnerability scan results and produce remediation plans (POA&Ms), tracking items through to closure
Assist with STIG and security control checklists by documenting compliance status and exceptions
Maintain accurate inventories of in-scope hardware, software, and documentation
Coordinate with the government remote cybersecurity team, program managers, and security officers to ensure artifacts meet enterprise expectations
Provide monthly reporting and recurring customer deliverables on time and in the required format
Support ramp-up phase activities, including capturing and validating documentation from the outgoing team

Requirements

Meet DoD 8140.03 certification requirements for this role (IAM Level I), such as Security+ CE
Complete role-based computing environment certification before privileged access, within 180 days of first day
Hands-on experience supporting the RMF process in a federal, DoD, or similarly complex environment
Experience producing security documentation and artifacts reviewed by a government ISSM, auditor, or authorizing official
Bachelor’s degree not required; equivalent experience, technical training, or industry certifications considered
Working knowledge of federal cybersecurity frameworks: FIPS 199/200, NIST 800-53, NIST 800-82, CNSSI 1253
Familiarity with DoD tools for vulnerability scanning and compliance checking (e.g., ACAS, SCAP) and ability to interpret output
Strong written communication to transform technical input into clear, defensible documentation
Detail-oriented with the ability to manage multiple deliverables with overlapping deadlines
Ability to coordinate with program managers, remote cybersecurity stakeholders, security officers, engineers, and vendors to gather required information
US Citizen with ability to obtain and maintain a Secret security clearance

Technologies

Cybersecurity Risk Management Framework (RMF)
DoD 8140.03
Security+ CE
FIPS 199/200
NIST 800-53, NIST 800-82
CNSSI 1253
ACAS, SCAP
STIG
eMASS
Purdue Enterprise Reference Architecture
FedRAMP
Zero Trust
PIA/PRiLA

Preferred Skills

Experience uploading and maintaining artifacts in eMASS or a similar RMF package management system
Experience supporting OT/ICS/SCADA or facility related control systems (e.g., building automation, advanced metering)
Knowledge of the Purdue Enterprise Reference Architecture
Experience supporting ATO or ATC efforts from start to finish
Familiarity with FedRAMP and Zero Trust principles
Experience with privacy documentation (PIA/PRiLA) or contingency plan artifacts
Prior DLA customer experience

Location

Columbus, OH | Onsite

View full job page →

Get Security Risk Framework Engineer Jobs alerts

New Security Risk Framework Engineer Jobs, daily.