Hybrid Cybersecurity Specialist: RMF & Compliance

Alpha Omega; Vienna (VA); Hybrid; USD 100,000 - 130,000; Full time

Benefits offered by this job

PTO including parental, military, and

11 federal holidays

Health and Dental Insurance

Life Insurance and disability coverage

401(k) with company match

Tuition & Professional Development Re‑

Job summary

Alpha Omega is seeking a Cybersecurity Specialist to support a government customer in a hybrid work arrangement with onsite days in the National Capital Region.

The role focuses on maintaining security authorizations, conducting annual risk assessments, and coordinating with privacy and governance teams to ensure regulatory compliance.

Candidates should have DHS Public Trust or higher, 5+ years in cybersecurity, and deep knowledge of RMF, NIST, and audit readiness.

Qualifications

• Bachelor’s degree preferred.
• 5+ years of cybersecurity experience.
• Experience with RMF and NIST controls.
• Experience with POA&M management and vulnerability scanning.
• Ability to interpret FISMA, FIPS, and NIST guidelines.
• Experience supporting DHS/FISMA audits.

Responsibilities

• Proactively create, monitor, and update POA&M to resolve weaknesses.
• Create Waivers or Risk Acceptance Memos for risk management.
• Conduct annual DHS security assessments.
• Review and update security authorization documents annually.
• Conduct Contingency Plan tests annually and update the plan.
• Perform system self-assessments for Ongoing Authorization.
• Monitor and respond to ISVM/Patch Management.
• Provide audit support for audits (FISMA, DHS, etc.).
• Coordinate with Privacy, Records, and Information Governance on compliance.

Skills

Cybersecurity experience

RMF process

NIST Controls

POA&M management

Vulnerability assessment

Audit support

Security documentation

Communication skills

Team leadership

Information assurance

Education

Bachelor’s degree preferred

Job description

Alpha Omega is seeking a Cybersecurity Specialist to support a government customer in a hybrid work arrangement with onsite days in the National Capital Region.

The role focuses on maintaining security authorizations, conducting annual risk assessments, and coordinating with privacy and governance teams to ensure regulatory compliance.

Candidates should have DHS Public Trust or higher, 5+ years in cybersecurity, and deep knowledge of RMF, NIST, and audit readiness.