Cybersecurity SME: RMF/FISMA for DoD PACAF - Travel 40%

Goldbelt, Inc.; Honolulu (HI); On-site; USD 90,000 - 100,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) plan with company matching

Paid time off

Job summary

Goldbelt, Inc. is seeking a Cybersecurity Subject Matter Expert to support PACAF Defensive Cyber Operations. You will deliver RMF/FISMA support, conduct A&A validations, and maintain artifacts across DoD directives.

You will also prepare system security documentation and mentor cyber personnel to ensure compliance. The role requires hands-on experience with eMASS, ITIPS, SNAP, GIAP, and related RMF processes, including CRE management and continuous monitoring.

Qualifications

• Deliver Cybersecurity and RMF/FISMA support to mission owners.
• Maintain and update A&A artifacts and RMF documentation.
• Ensure A&A data are synchronized across AF and DISA repositories.

Responsibilities

• Assist PACAF MOBs & GSUs with FISMA, DoD, and AF cybersecurity directives.
• Conduct A&A validation/reviews using STIGs and NIST standards.
• Develop and sustain A&A packages in databases (e.g., CAP, GIAP, eMASS, ITIPS).
• Prepare RMF products for theater circuits/enclaves via eMASS.
• Create and submit RMF deliverables (SSP, POAMs, risk reports).
• Mentor PACAF cybersecurity forces and train on DoD security tools.

Skills

Cybersecurity RMF/FISMA

A&A validation

NIST SP 800-12

RMF artifacts management

DoD cybersecurity directives

Mentorship & training

Vulnerability scanning tools

Endpoint security knowledge

RMF deliverables preparation

DISA/STIGs familiarity

Education

Bachelor’s degree in related field

Tools

eMASS

ITIPS

SNAP

GIAP

CAP

CMRS

Job description

Goldbelt, Inc. is seeking a Cybersecurity Subject Matter Expert to support PACAF Defensive Cyber Operations. You will deliver RMF/FISMA support, conduct A&A validations, and maintain artifacts across DoD directives.

You will also prepare system security documentation and mentor cyber personnel to ensure compliance. The role requires hands-on experience with eMASS, ITIPS, SNAP, GIAP, and related RMF processes, including CRE management and continuous monitoring.