Risk Management Framework (RMF) Test Engineer
On-siteGroton, Connecticut, United States
Job Summary
Interpret and apply Risk Management Framework requirements across system components, develop and maintain RMF documentation, and identify security and compliance gaps. Collaborate with the team to improve compliance posture, support vulnerability assessments, remediation efforts, and evidence collection, and ensure adherence to applicable policies. Stay current with STIGs, DoD/Navy guidance, and emerging cybersecurity threats while serving as the primary point of contact for Navy system accreditation activities. This 100% on-site position requires a Secret clearance with the ability to obtain Top-Secret, and candidates must have 2+ years of experience evaluating system compliance against the RMF.
Required Qualifications
- High School Diploma or equivalent
- 2+ years of experience evaluating the compliance of a system against the Risk Management Framework (RMF)
- 2+ years of exposure to IT systems (Active Directory, Exchange, Tanium, Trellix, etc)
- Current active Secret security clearance
- Ability to obtain and maintain final DoD Top-Secret Clearance
- Experience with RMF Authorization To Operate (ATO) packages in Enterprise Mission Assurance Support Service (eMASS)
- Experience working on cybersecurity RMF body of evidence documentation such as Plan of Action & Milestones
- Excellent written and verbal communicator
- Highly organized, detail-oriented, and capable of managing multiple projects simultaneously
- Collaborative professional who works effectively with internal and external entities
- Color Vision
- Light Lifting
- Pulling
- Pushing
Desired Qualifications
- Experience with vulnerability scanning tools (ACAS, Nessus)
- Experience using system compliance assessment tools (Evaluate STIG, STIG Manager)
- Experience with compliance reporting (VRAM, CMRS)
- Working knowledge of Navy Submarine systems and requirements
- Current CompTIA Security +
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.