Cybersecurity RMF Specialist

darkwolfsolutions; Herndon (VA); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

EEO/AA employer

Job summary

Dark Wolf is seeking a Cybersecurity RMF Specialist to provide regulatory and technical leadership for IL5/IL6 environments. You will manage the RMF process end-to-end, develop a comprehensive BoE for cATO, and liaison between Platform Engineers, Developers, and government stakeholders.

The role requires navigating complex cloud security needs for national security systems. The position offers hybrid work in Northern Virginia with a salary range of $120,000–$150,000, commensurate with

Qualifications

• 5+ years of cybersecurity experience focused on DoD RMF for IL5/IL6
• Experience with DoD Cloud Service Providers (e.g., AWS GovCloud)
• Independently coordinate with government Security Control Assessors (SCA)
• Experience with eMASS and DoD records management
• Familiarity with security scanning tools and IaC integration

Responsibilities

• Lead end-to-end RMF for DoD IL5/IL6; manage eMASS controls, artifacts, POA&M, and docs
• Manage Continuous Monitoring and submit STIGs, diagrams, SBOMs, and evidence to DHA team
• Coordinate ACAS/SAST scans and remediation with DHA and engineers
• Translate DISA STIG/SRG/NIST 800-53 into actionable requirements; implement with IaC
• Act as liaison to government stakeholders; brief leadership on posture and risks

Skills

DoD RMF expertise

Independent coordination

Briefings to leadership

Security clearance readiness

Education

B.A. or B.S. Information Security/Computer Science

DoD 8140/8570 IAM Level III Certification

Tools

eMASS

Jira

Confluence

ACAS/SAST tools

Job description

Dark Wolf is seeking a Cybersecurity RMF Specialist to serve as the primary regulatory and technical authority for the authorization of mission-critical software in DoD Impact Level 5 (IL5) and Impact Level 6 (IL6) enclaves. This role is responsible for the independent management of the end-to-end Risk Management Framework (RMF) process, including the development of a comprehensive Body of Evidence (BoE) for Continuous Authorization to Operate (cATO). The successful candidate will act as the principal liaison between Platform Engineers, Developers, and Government stakeholders - including Security Control Assessors (SCA) and Authorizing Officials (AO) - to ensure the rigorous application of cybersecurity principles within a DoD operational ecosystem. This position requires a candidate capable of navigating complex cloud security requirements independently to achieve and maintain software readiness for national security systems.

Key Responsibilities:

• Leading the end-to-end RMF process specifically for DoD IL5 and IL6 environments, managing eMASS security controls, Artifacts, POA&M, and authorization documentation to maintain system compliance and security posture
• Managing Continuous Monitoring (ConMon) activities and security artifacts, including maintaining, reviewing, validating, and submitting STIG checklists, architecture/network diagrams, HW/SW inventories, PPSM documentation, SBOMs, container image inventories, and supporting evidence to the DHA Cybersecurity Team
• Coordinating ACAS/SAST Vulnerability scans, IAVA compliance, and remediation efforts with DHA Cybersecurity Team and Platform Engineers, tracking vulnerabilities and compliance findings through remediation and closure
• Translating DISA STIG, SRG, and NIST 800-53 requirements into actionable technical requirements, partnering with Platform/Engineers to implement security controls through Infrastructure as Code (IaC) and performing security control assessments
• Serving as the primary cybersecurity liaison for government stakeholders, supporting CCB/change requests and briefing DHA cybersecurity teams and senior leadership on system security posture, compliance status, risks, remediation efforts, and the path to continued authorization

Required Qualifications:

• 5+ years of relevant Cybersecurity experience, with a focus on DoD RMF and Impact Level 5/6 authorizations
• Direct experience with DoD Cloud Service Providers (e.g. AWS Govcloud) ecosystems
• Proven ability to independently lead coordination with government Security Control Assessors (SCA) and mission partners
• Experience with eMASS and the Enterprise Mission Assurance Support Service for managing DoD system records
• Knowledge of security scanning tools (e.g., Static Analysis, Dynamic Analysis, etc.)
• Experience with using Atlassian tools such as Jira and Confluence
• Confidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders
• DoD 8140/8570 IAM Level III Certification (e.g., CISSP, CISM, or GSLC)
• US Citizenship and an active DoD Secret security clearance
• B.A. or B.S. Information Security, Computer Science or related discipline

Desired Qualifications:

• Experience with the DoD Architecture Framework (DoDAF)
• Experience with Cloud Computing Security Requirements Guide (CC SRG)
• Experience with DoD DevSecOps Fundamentals Playbook
• Experience with DevSecOps Platforms such as GitLab or GitHub
• Understanding of container based application development tools (e.g., Docker, Docker Compose, Kubernetes)
• Understanding of "Continuous ATO" (cATO) concepts and the integration of automated security testing into DevSecOps pipelines

This role requires a hybrid presence in Northern Virginia. The compensation for this role is estimated to be between $120,000-$150,000, commensurate on experience.

We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.

In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.

We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.