Information Security Risk Specalist

Kavaliro; Honolulu (HI); On-site; USD 120,000 - 180,000; Full time

Job summary

Kavaliro is seeking an RMF Specialist/ISSO to support a client in Hawaii. The role requires building and maintaining RMF artifacts, coordinating vulnerability remediation, and delivering assessment-ready documentation for classified programs.

Ideal candidates will have 3+ years of RMF support, experience with ACAS, Nessus, SCAP, eMASS, and a TS/SCI clearance. HS diploma or GED and relevant security certifications are required.

Qualifications

• ,

Responsibilities

• Support RMF authorization activities in DoD/IC environments.
• Coordinate vulnerability remediation with stakeholders.
• Maintain eMASS package population, artifacts, and POA&M tracking.
• Produce assessment-ready documentation and security rationale for AO/SCA reviews.

Skills

RMF experience

Vulnerability management

Security documentation

Communication clarity

TS/SCI clearance

Education

HS diploma or GED

Security certifications (CEH/CISM/CCSP/CCSK/CISSP/CompTIA Security+)

Tools

ACAS

Nessus

SCAP

STIG Viewer

eMASS

Job description

Kavaliro is seeking an RMF Specialist/ISSO to support a client in Hawaii.

You Have:

• 3+ years of experience supporting RMF authorization activities, such as NIST SP 800-37 or SP 800-53, on DoD or IC information systems
• Experience with continuous monitoring tooling such as ACAS, Nessus, SCAP, or STIG Viewer, and vulnerability remediation coordination
• Experience with categorization methodology under FIPS 199 and NIST SP 800-60, and with impact-level determinations for classified or national security systems under CNSSI 1253
• Knowledge of eMASS, including package population, artifact management, POA&M tracking, and control inheritance or hybrid control management
• Ability to read, interpret, and apply control assessment procedures and produce assessment-ready documentation without extensive rework
• Ability to document security rationale clearly enough for AO or SCA review without additional translation by the ISSM
• TS/SCI clearance
• HS diploma or GED
• Information Security Certification, including CEH, CISM, CCSP, CCSK, CISSP, or CompTIA Security+ Certification

Nice If You Have:

• Experience with defense or national security-related issues in the Indo-Pacific region
• Experience with NIST 800-53 and DoD 8500 or 8510
• Experience with selecting, designing, and implementing security tools and capabilities for large, complex federal or commercial organizations
• Experience with Amazon Web Services (AWS), Azure, or Google Cloud Platform (GCP)
• Knowledge of the Enterprise Mission Assurance Support Service (eMASS)
• Knowledge of innovative cybersecurity capabilities, including AI and machine learning, Next-Generation Firewall (NGFW), and Big Data
• Knowledge of Mission Partner Engagement (MPE)
• Ability to assist in developing cybersecurity policies or governance frameworks
• Possession of excellent verbal and written communication skills

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.