Cybersecurity Specialist 4

Caribou Thunder; Mexico; On-site; PHP 6,086,000 - 7,912,000; Full time

Benefits offered by this job

Premium Health Insurance

401(k) with Company Match

Flexible PTO & Work Schedule

Education & Certification Reimburseme

Job summary

Caribou Thunder is seeking a Cybersecurity Specialist 4 to lead RMF activities and A&A efforts for sensitive DoD systems at Kirtland AFB, NM. You will guide risk management, build BoE documents, and coordinate with government stakeholders.

The role requires TS/SCI eligibility, 5+ years of hands-on cybersecurity, and experience with eMASS, STIGs, and security controls. You will contribute to accreditation packages and continuous monitoring, ensuring compliance with NIST and DoD standards.

Qualifications

• Active Top Secret clearance with SCI eligibility.
• 5+ years hands-on cybersecurity experience.
• Experience RMF lifecycle and Authority to Operate (ATO).
• Experience developing RMF Body of Evidence documentation.
• Experience administering accreditation packages using eMASS.

Responsibilities

• Lead RMF activities supporting authorization and continuous monitoring of classified information systems.
• Develop, maintain, and manage RMF BoE documentation (SSPs, SCTMs, POA&Ms, security assessment docs).
• Maintain accreditation packages within eMASS and ensure audit readiness.
• Coordinate with AOs, ISSMs, engineers, and leadership to achieve and maintain ATO.
• Install, configure, integrate, and troubleshoot enterprise cybersecurity tools.

Skills

RMF lifecycle

Technical writing

Project management

Analytical thinking

Education

Bachelor's degree in Computer Science, Cybersecurity, IT or related STEM

Tools

eMASS

POA&M

SSP

STIG Viewer

ACAS

SCAP

Job description

Cybersecurity Specialist 4

Senior Level | $100,000 - $130,000 | Travel: Minimal | Location: Kirtland AFB, NM | Active Top Secret Clearance (SCI Eligible) Required

Support the modernization and expansion of mission-critical cybersecurity capabilities by leading Risk Management Framework (RMF) activities, Assessment & Authorization (A&A) efforts, and enterprise cybersecurity compliance initiatives. Join a collaborative engineering team responsible for securing classified systems through continuous monitoring, vulnerability management, security control implementation, and accreditation support while ensuring compliance with DoD cybersecurity standards.

A Day in the Life - What you'll do

• Lead Risk Management Framework (RMF) activities supporting the authorization and continuous monitoring of classified information systems.
• Develop, maintain, and manage RMF Body of Evidence (BoE) documentation including System Security Plans (SSPs), Security Controls Traceability Matrices (SCTMs), Plan of Action & Milestones (POA&M), Security Assessment documentation, and supporting authorization artifacts.
• Maintain accreditation packages within Enterprise Mission Assurance Support Service (eMASS), ensuring system documentation remains accurate, complete, and audit-ready.
• Coordinate with government Authorizing Officials (AOs), Information System Security Managers (ISSMs), cybersecurity engineers, and program leadership to achieve and maintain Authority to Operate (ATO).
• Install, configure, integrate, and troubleshoot enterprise cybersecurity tools supporting secure system operations and continuous monitoring.
• Develop cybersecurity policies, standard operating procedures, and process improvements that strengthen program security posture and operational efficiency.
• Perform security control assessments and verification activities to ensure compliance with NIST, DoD, and organizational cybersecurity requirements.
• Identify, document, and track cybersecurity vulnerabilities and deficiencies through Plan of Action & Milestones (POA&M) management while coordinating remediation efforts across engineering teams.
• Support identity and access management solutions, Public Key Infrastructure (PKI), cryptographic implementations, and secure authentication technologies.
• Maintain secure repositories of RMF documentation and ensure controlled access to sensitive cybersecurity artifacts.
• Provide cybersecurity subject matter expertise to engineering teams, project managers, and government stakeholders throughout the system development lifecycle.
• Support continuous improvement initiatives by evaluating emerging cybersecurity technologies, security tools, and compliance processes.

Required Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related STEM (Science, Technology, Engineering, or Mathematics) discipline and 9 years of related experience.
• Four additional years of relevant cybersecurity experience may be substituted in lieu of a degree.
• Minimum 5 years of hands-on cybersecurity experience supporting classified or enterprise information systems.
• Active Top Secret security clearance with SCI eligibility and the ability to obtain and maintain TS/SCI access.
• Experience supporting the DoD Risk Management Framework (RMF) lifecycle and Authority to Operate (ATO) activities.
• Experience developing and maintaining RMF Body of Evidence documentation.
• Experience administering accreditation packages using eMASS.
• Experience developing and maintaining Plan of Action & Milestones (POA&M) documentation.
• Strong technical writing and documentation skills supporting cybersecurity compliance.
• Experience collaborating with internal engineering teams and external government oversight organizations.
• Strong analytical, organizational, and project management skills.

Preferred Qualifications

• Current DoD 8570 IAT Level II certification or Cybersecurity Service Provider (CSSP) certification.
• Experience integrating and administering Linux and Windows systems within virtualized environments.
• Experience installing and managing Enterprise Security Systems (ESS) and Assured Compliance Assessment Solution (ACAS).
• Experience performing SCAP compliance scanning and Security Technical Implementation Guide (STIG) validation using STIG Viewer.
• Experience implementing STIGs and security controls across classified military environments.
• Experience securing enterprise technologies including:
  • Firewalls
  • Router Access Control Lists (ACLs)
  • Public Key Infrastructure (PKI)
  • Identity and Access Management (IAM)
  • Virtualization platforms
  • Secure scripting and automation
  • OWASP secure development practices
• Experience performing Static Code Analysis using tools such as Fortify.
• Experience supporting cybersecurity modernization initiatives within Department of Defense or other federal programs.

Who is Caribou Thunder?

Caribou Thunder is a HUBZone-certified small business providing advanced technical and engineering services to the U.S. Department of War and its mission partners.

35+ states and 20+ countries.

We’ve delivered trusted solutions for over two decades—strengthening national readiness across missions on land, undersea, in the air, and throughout LEO, MEO, GEO, and deep space.

Why Caribou Thunder?

TEAM THUNDER - Mission Focused. Delivery Proven. Ready to Serve.

• Employee Advocacy
• Mission Proven
• Global Reach
• Skilled Teams
• Modern Tools
• Empowering Culture

Our engineers and innovators ensure capability from sea floor to space frontier—delivering on time, maintaining compliance, and performing with precision in high-consequence environments.

We specialize in Engineering Services, Cybersecurity, Software Development, Modeling & Simulation, Digital Engineering, Artificial Intelligence, and Secure Mission Systems—disciplines powering the nation's most complex technical missions.

Employee Advocacy + Benefits

Our people are the heart of Caribou Thunder. We invest in their growth, flexibility, and well-being—knowing their success drives ours.

Benefits include:

• Premium Health, Dental & Vision Insurance
• 401(k) with 6% Company Match
• Flexible PTO & Work Schedule
• Education & Certification Reimbursement
• Support for Military Leave
• Work-Life Balance & Traditional Family Values

Your future, your flexibility, your well-being - we invest in you.