Cybersecurity Specialist - DoD RMF/ATO Expert

Thompson Gray Inc; Huntsville (AL); On-site; USD 95,000 - 135,000; Full time

Benefits offered by this job

Health Plan

401(k) with employer match

Paid time off

Job summary

Thompson Gray Inc. in Huntsville, Alabama, seeks a cyber security specialist for an Army program office.

The role develops security documentation and procedures to ensure DoD compliance and to obtain Authorizations To Operate (ATO) for information systems operated by the office. The candidate will work with internal and external agencies to implement RMF, CNSSI categorization, and NIST SP 800-53 controls, performing privacy impact analyses as needed.

Qualifications

• Bachelor's degree in an IT related field.
• 5 years general MIS and/or cybersecurity experience.
• Existing SECRET security clearance.
• Ability to work independently.
• Excellent communication skills.
• Familiarity with Microsoft Office suite products.
• Experience supporting or working in an Army Program/Product office preferred.

Responsibilities

• Developing RMF documentation to fulfill FISMA 2014 requirements.
• Categorizing a webserver in accordance to CNSSI 1253.
• Implementing security controls from NIST SP 800-53.
• Working with IS Owners and ISSM to document RMF requirements.
• Developing and implementing standardized policies and procedures for control families identified for implementation.
• Collaborating with NEC to ensure production servers are operational.
• Performing privacy impact analysis to ensure PII is not compromised.

Skills

Independent work

Excellent communication

Cybersecurity experience

Security clearance

Education

Bachelor's degree in IT related field

Tools

Microsoft Office

Job description

Thompson Gray Inc. in Huntsville, Alabama, seeks a cyber security specialist for an Army program office.

The role develops security documentation and procedures to ensure DoD compliance and to obtain Authorizations To Operate (ATO) for information systems operated by the office. The candidate will work with internal and external agencies to implement RMF, CNSSI categorization, and NIST SP 800-53 controls, performing privacy impact analyses as needed.