Cybersecurity Engineer / RMF Specialist

NEMEAN SOLUTIONS LLC; Columbus (OH); Sur place; USD 95 000 - 125 000; Plein temps

Résumé du poste

Cybersecurity Jobs is seeking a Cybersecurity Engineer / RMF Specialist to support a federal customer in documenting, assessing, and strengthening cybersecurity posture for building and facility control systems to achieve and maintain an Authority to Operate (ATO).

The role focuses on developing RMF documentation, collecting data from system owners and engineers, supporting risk categorization, and managing remediation through POA&Ms. On-site work with federal requirements is expected.

Qualifications

• Develop RMF documentation and security artifacts (POA&Ms, system diagrams, security categorization documents).
• Collect, consolidate, validate, and organize technical information for audit-ready deliverables.
• Support system categorization and risk assessment activities with documentation and stakeholder inputs.
• Review vulnerability scans, document findings, develop remediation plans and POA&Ms, track actions to closure.

Responsabilités

• Develop and maintain RMF documentation and security artifacts, including system diagrams, security categorization documents, control implementation narratives, and POA&Ms.
• Collect, consolidate, validate, and organize technical information from system owners, engineers, and operations personnel into audit-ready deliverables.
• Support system categorization and risk assessment activities by preparing documentation and tracking stakeholder inputs.
• Review vulnerability scan results, document findings, develop remediation plans and POA&Ms, and track actions through closure.

Connaissances

RMF documentation

System categorization

Risk assessment

POA&Ms

Vulnerability management

Description du poste

Cybersecurity Engineer / RMF Specialist role supporting a federal customer to document, assess, and strengthen cybersecurity posture for building and facility control systems to achieve and maintain an Authority to Operate (ATO).

Responsibilities

• Develop and maintain RMF documentation and security artifacts, including system diagrams, security categorization documents, control implementation narratives, and POA&Ms.
• Collect, consolidate, validate, and organize technical information from system owners, engineers, and operations personnel into audit-ready deliverables.
• Support system categorization and risk assessment activities by preparing documentation and tracking stakeholder inputs.
• Review vulnerability scan results, document findings, develop remediation plans and POA&Ms, and track actions through closure.