FedRAMP RMF Cyber Risk Lead

Steampunk, Inc.; McLean (VA); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Employee ownership

Job summary

Steampunk is seeking a Cyber Risk Management Specialist to specialize in cyber hygiene, RMF, FedRAMP, ATO processes and continuous monitoring. The role requires strong knowledge of CIA principles and the ability to implement security controls across cloud environments in a fast-paced federal contracting setting.

The candidate will lead DevSecOps integration, risk assessments, vulnerability management, and security analytics while coordinating with 3PAOs and organization stakeholders to ensure

Qualifications

• Ability to obtain a U.S. government Security Clearance.
• Master's Degree and 6 years of cyber and FISMA experience; OR Bachelor's Degree and 8 years of cyber and FISMA experience; OR No degree and 12 years of experience, 10 of which must be in cyber and FISMA.
• Possesses at least one professional certification: CISSP, CASP, CISA, CISM or GSLC.

Responsibilities

• Integrate security into DevOps at every stage of the SDLC.
• Identify security holes and provide solutions based on risk posture.
• Develop and implement automation strategies to optimize IT infrastructure.
• Lead project teams to accredit cloud products and services under FedRAMP and RMF.
• Support ATO/cATO/continuous monitoring with documentation, audits and assessments.
• Advise clients on FedRAMP requirements and security controls implementation.

Skills

DevSecOps

RMF

A&A

FedRAMP

Continuous monitoring

Vulnerability management

Security hygiene

Cloud security

NIST SP 800-37/53/137 ISCM

Education

Master's Degree in cyber/FISMA

Bachelor's Degree in cyber/FISMA

No degree with 12 years cyber/FISMA experience

Job description

Steampunk is seeking a Cyber Risk Management Specialist to specialize in cyber hygiene, RMF, FedRAMP, ATO processes and continuous monitoring. The role requires strong knowledge of CIA principles and the ability to implement security controls across cloud environments in a fast-paced federal contracting setting.

The candidate will lead DevSecOps integration, risk assessments, vulnerability management, and security analytics while coordinating with 3PAOs and organization stakeholders to ensure