IT Certified Professional - Senior

UPSLOPE ADVISORS, INC; Aberdeen (MD); On-site; USD 100,000 - 120,000; Full time

Job summary

UPSLOPE ADVISORS, INC. seeks a cybersecurity engineer to provide on-site RMF support for Aberdeen Test Center information systems, including ATC LAN, LIN, and secure test environments. You will help establish and monitor ATOs and support DoD RMF processes.

The role requires active Secret clearance, DoD 8140/8570 baseline compliance, and experience across Windows, Linux, and Apple platforms, including Secret environments.

Qualifications

• RMF lifecycle documentation, supporting evidence for ATO decisions.
• SCA visits, validation activities, remediation responses.
• IAVM activities and POA&M maintenance.

Responsibilities

• Support RMF system categorization, boundary identification, control selection and assessment.
• Prepare, update, and maintain RMF documentation for ATO decisions.
• Support SCA visits, reviews and remediation responses.
• Perform continuous security-control monitoring and POA&M maintenance.
• Review hardware/software baselines and assess cybersecurity impacts.
• Analyze defect/incident reports and reconcile system information.
• Support software baseline requirements and capability migrations.

Skills

RMF lifecycle

Cross-platform networks

Incident analysis

Education

CASP+/SecurityX certification

Active Secret clearance

Job description

POSITION SUMMARY

Provide on-site cybersecurity engineering and DoD Risk Management Framework (RMF) support for Aberdeen Test Center (ATC) information systems, including the ATC LAN, Logically Isolated Network, Secure Test Environment, and Test and Evaluation Network. Help establish, sustain, and continuously monitor system authorizations to operate (ATOs).

PRIMARY RESPONSIBILITIES

• Support RMF system categorization, boundary identification, security-control selection, implementation, and assessment.
• Prepare, update, and maintain RMF lifecycle documentation and supporting evidence for ATO decisions and ongoing authorization.
• Support Security Control Assessor (SCA) visits, reviews, validation activities, and remediation responses.
• Perform continuous security-control monitoring, Plan of Action and Milestones (POA&M) maintenance, and information assurance vulnerability management (IAVM) activities.
• Review changes to hardware/software baselines, assess cybersecurity impacts and interoperability, and support configuration-management and technical control boards.
• Analyze defect/incident reports; validate tracking records and reconcile relevant software and hardware information.
• Support software baseline requirements, system architecture, emerging technology evaluations, and capability migrations.

MANDATORY QUALIFICATIONS

• CASP+ (now called CompTIA SecurityX) or an equivalent certification accepted under the solicitation.
• At least five years supporting RMF lifecycle reporting and software/hardware reconciliation.
• Experience managing networks across Windows, Linux, and Apple platforms and in unclassified/classified (including Secret) environments.
• Active Secret personnel security clearance, with favorably adjudicated Type 3 investigation, at bid submission; ability to maintain assigned SIPRNet access.
• Meet applicable DoDD 8140.01, DoD 8570.01-M, DFARS 252.239.7001, and AR 25-2 baseline certification requirements at award.