Federal RMF Cybersecurity Engineer for ATO and Remediation

NEMEAN SOLUTIONS LLC; Columbus (OH); On-site; USD 95,000 - 125,000; Full time

Job summary

Cybersecurity Jobs is seeking a Cybersecurity Engineer / RMF Specialist to support a federal customer in documenting, assessing, and strengthening cybersecurity posture for building and facility control systems to achieve and maintain an Authority to Operate (ATO).

The role focuses on developing RMF documentation, collecting data from system owners and engineers, supporting risk categorization, and managing remediation through POA&Ms. On-site work with federal requirements is expected.

Qualifications

• Develop RMF documentation and security artifacts (POA&Ms, system diagrams, security categorization documents).
• Collect, consolidate, validate, and organize technical information for audit-ready deliverables.
• Support system categorization and risk assessment activities with documentation and stakeholder inputs.
• Review vulnerability scans, document findings, develop remediation plans and POA&Ms, track actions to closure.

Responsibilities

• Develop and maintain RMF documentation and security artifacts, including system diagrams, security categorization documents, control implementation narratives, and POA&Ms.
• Collect, consolidate, validate, and organize technical information from system owners, engineers, and operations personnel into audit-ready deliverables.
• Support system categorization and risk assessment activities by preparing documentation and tracking stakeholder inputs.
• Review vulnerability scan results, document findings, develop remediation plans and POA&Ms, and track actions through closure.

Skills

RMF documentation

System categorization

Risk assessment

POA&Ms

Vulnerability management

Job description

Cybersecurity Jobs is seeking a Cybersecurity Engineer / RMF Specialist to support a federal customer in documenting, assessing, and strengthening cybersecurity posture for building and facility control systems to achieve and maintain an Authority to Operate (ATO).

The role focuses on developing RMF documentation, collecting data from system owners and engineers, supporting risk categorization, and managing remediation through POA&Ms. On-site work with federal requirements is expected.