Information Systems Security Lead — RMF, NIST & STIGs

Canvas; Eglin Air Force Base (FL); On-site; USD 110,000 - 140,000; Full time

Job summary

Canvas is seeking a security professional to lead information systems security for DoD-related networks at a U.S. Air Force base in Florida. The role involves managing ATO packages, conducting audits, and maintaining SSP/POAMs.

Responsibilities include continuous monitoring, vulnerability remediation with ACAS, applying NIST SP 800-53 controls, and ensuring compliance with STIGs/SRGs and DoD directives.

Qualifications

• Experience implementing information systems security controls per RMF.
• Ability to conduct regular security audits and verify policy compliance.
• Experience developing and updating Authorization to Operate (ATO) packages.

Responsibilities

• Develop, update, and manage ATO packages and system records in eMASS.
• Execute continuous monitoring and review audit logs for vulnerabilities.
• Apply NIST SP 800-53 controls and verify STIG/SRG compliance.
• Scan for vulnerabilities with ACAS and coordinate remediation.
• Identify, report, and track cybersecurity incidents and data spills per directives.
• Draft and maintain System Security Plans (SSP) and POAMs.
• Demonstrate knowledge of RMF lifecycle and related USAF guidance.

Skills

Information Security

Audit

ATO Management

RMF Lifecycle

NIST SP 800-53

STIGs & SRGs

ACAS

Incident Response

SSP/POAM

Tools

eMASS

ACAS

Job description

Canvas is seeking a security professional to lead information systems security for DoD-related networks at a U.S. Air Force base in Florida. The role involves managing ATO packages, conducting audits, and maintaining SSP/POAMs.

Responsibilities include continuous monitoring, vulnerability remediation with ACAS, applying NIST SP 800-53 controls, and ensuring compliance with STIGs/SRGs and DoD directives.