Cybersecurity / RMF Lead

Electrosoft; United States; On-site; USD 90,000 - 130,000; Full time

Job summary

Electrosoft Services, LLC is a leading provider of cybersecurity and technology solutions for federal agencies. The Cybersecurity / RMF Lead will steer RMF assessment and authorization activities, ensure continuous monitoring, and integrate security controls across architecture, development, cloud, testing, release, and operations.

The role requires DoD cybersecurity experience, strong knowledge of NIST SP 800-53 and DISA STIGs, and an active DoD Secret clearance.

Qualifications

• At least five years of RMF/NIST assessment-and-authorization experience.
• DoD cybersecurity experience, including security-control assessment and authorization reviews for large or complex organizations.
• Active DoD Secret clearance and IT-II / Tier 3 eligibility, as required.
• Knowledge of emerging technologies and cloud security implications.

Responsibilities

• Lead the RMF and assessment-and-authorization strategy for PIEE systems and services.
• Plan and coordinate security-control implementation, assessment, evidence, authorization packages, continuous monitoring, and POA&M management.
• Maintain visibility into authorization status, material vulnerabilities, control deficiencies, remediation priorities, and residual risk.
• Integrate cybersecurity requirements into architecture, development, DevSecOps pipelines, cloud environments, releases, and operational procedures.
• Coordinate cybersecurity engineers, application vulnerability analysts, system stakeholders, assessors, Authorizing Official representatives, and delivery teams.
• Ensure DISA STIGs, NIST controls, secure configuration, vulnerability findings, and remediation evidence are addressed and traceable.
• Provide executive briefings, risk recommendations, metrics, and escalation of issues that could affect authorization or mission operations.

Skills

RMF/NIST experience

Security governance

Cloud security

DoD cybersecurity

Tools

eMASS

NIST SP 800-53

DISA STIGs

POA&M management

Job description

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation. We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded. The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more.

Cybersecurity / RMF Lead

Position Summary

Leads cybersecurity governance, RMF assessment and authorization, continuous authorization, control evidence, vulnerability risk management, and security integration across architecture, development, cloud, testing, release, and operations.

Key Responsibilities

• Lead the RMF and assessment-and-authorization strategy for PIEE systems and services.
• Plan and coordinate security-control implementation, assessment, evidence, authorization packages, continuous monitoring, and POA&M management.
• Maintain visibility into authorization status, material vulnerabilities, control deficiencies, remediation priorities, and residual risk.
• Integrate cybersecurity requirements into architecture, development, DevSecOps pipelines, cloud environments, releases, and operational procedures.
• Coordinate cybersecurity engineers, application vulnerability analysts, system stakeholders, assessors, Authorizing Official representatives, and delivery teams.
• Ensure DISA STIGs, NIST controls, secure configuration, vulnerability findings, and remediation evidence are addressed and traceable.
• Provide executive briefings, risk recommendations, metrics, and escalation of issues that could affect authorization or mission operations.

Required Qualifications

• At least five years of RMF/NIST assessment-and-authorization experience.
• DoD cybersecurity experience, including security-control assessment and authorization reviews for large or complex organizations.
• Knowledge of emerging technologies and cloud security implications.
• Active DoD Secret clearance and IT-II / Tier 3 eligibility, as required.

Preferred Qualifications

• Direct DLA and/or PIEE RMF, cATO, or cybersecurity leadership experience.
• Expertise with eMASS, NIST SP 800-53, DISA STIGs, POA&Ms, cloud authorization, software assurance, and continuous monitoring.
• CISSP, CAP/CGRC, CCSP, or comparable advanced cybersecurity certification.
• Experience integrating RMF evidence and security controls into Agile and DevSecOps delivery.

Electrosoft is an Equal Opportunity Employer/Veterans/Disabled