Principal Cybersecurity Engineer (RMF & Accreditation)

Owl Cyber Defense AG; Fort Meade (MD); On-site; USD 165,000 - 185,000; Full time

Benefits offered by this job

Medical coverage

Dental coverage

Vision coverage

401(k) with company match

Paid time off

Life insurance

Disability insurance

Job summary

Owl Cyber Defense Solutions, LLC seeks a Principal Cybersecurity Engineer to drive RMF accreditation at Ft Meade and on-site customer sites. You will tailor Security Control Traceability Matrices and coordinate ATO artifacts for government ISSMs.

You will also lead briefings, interface with Cross Domain engineers, and ensure robust documentation per NIST/DoD standards. A TS/SCI clearance and DoD 8570 IAT/IAM III are required.

Qualifications

• Bachelor’s degree in a related engineering or computer science field.
• 15+ years RMF Security Engineering experience.
• Knowledge of NIST 800-53, ICD-503 and DoD 8510.01.
• Experience driving RMF accreditation and AO negotiations.

Responsibilities

• Lead Accreditation activities and briefings for ISSMs and stakeholders.
• Create ATO artifacts: CONOPS, SSTP, SSP, POA&M, SCTM.
• Facilitate on-site ATO processes with Owl customers.
• Collaborate with Cross Domain engineers on control responses.

Skills

RMF Security Engineering

NIST 800-53

ICD 503

DoD 8510.01

Leadership

AO negotiations

Education

Bachelor’s Degree in System Engineering / Electrical Engineering / Computer Science or related field

Tools

XACTA

eMass

SCTM

ACAS

Job description

Principal Cybersecurity Engineer (RMF & Accreditation)

• Ft. Meade, MD
• Information Technology

Job Title: Principal Cybersecurity Engineer (RMF & Accreditation)

Department: Federal Installation and Support

Reports to: Director, Installation and Support

Office: Columbia, MD

Work Location: On Site - Ft Meade, MD

Job Title: Principal Cybersecurity Engineer (RMF & Accreditation) Department: Federal Installation and Support Reports to: Director, Installation and Support Office: Columbia, MD Work Location: On Site - Ft Meade, MD
Owl Cyber Defense is a leader and trusted partner in cyber security. We deliver solutions that protect and connect the world’s most critical networks. Owl’s product lines of cross domain, data diode, and portable media solutions provide the strongest available security checkpoints for threat prevention and secure data availability. Our in-depth expertise in security engineering at the operating system level enables us to help government and commercial customers meet ever-evolving cyber security threats. Job Summary:
The Principal Cybersecurity Engineer will create, and tailor Security Control Traceability Matrices (SCTM) based on the Risk Management Framework (RMF) guidance, NIST 800-53, ICD 503, and CNSSI 1253. Exposure to Cross Domain Solution (CDS) accreditation and the National Cross Domain Strategy and Management Office (NCDSMO) Raise the Bar (RTB) initiative is required. Experience creating artifacts supporting the RMF accreditation process is required. Essential Duties and Responsibilities:

• Serves as the primary technical liaison for Accreditation activities, leading and conducting Accreditation-related briefings for government ISSMs and senior customer stakeholders. Prepare support briefings for ATO packages statuses
• Facilitate XACTA and eMass data entry at Owl customer sites by creating Authorization to Operate packages for Authorization Official approval to include:
  • CONOPS
  • SSTP
  • SSP
  • POA&M
  • Self-Assessment Plan
  • Cyber Threat Security Plan
  • SCTM
• Facilitate the ATO process on-site with Owl customers
• Interface with Cross Domain engineers to document security control responses within required documentation

Requirements/Qualifications:

• Education
  • Bachelor’s Degree in System Engineering, Electrical Engineering, Computer Science, or a computer/software engineering related field.
• Experience
  • Minimum of 15+ years of experience in RMF Security Engineering
• Knowledge, Skills & Abilities
  • Ability to understand, interpret and make recommendations based on relevant publications (e.g., NIST 800-53, ICD-503 and DoD 8510.01)
  • Requirement Definition and Analysis, System Security Architecture
  • NCDSMO standards and guidance documents regarding CDS architecture, design, development, engineering, implementation, system security, local and remote management and monitoring, and filtering.
  • Leadership experience in utilizing Risk Management Framework to drive the end-to-end accreditation process including negotiating with the Authorizing Official (AO) to achieve an Authorization to Operate (ATO)
  • Linux Operating Systems including open-source distributions, SELinux policy and embedded systems
  • Security Technical Implementation Guide development and modification, and STIG remediation
  • SCAP/OVAL and ACAS scanning and thorough understanding of the framework
  • Previous Common Criteria
  • Trusted Computing
  • Penetration testing
  • Test and Evaluation (T&E) and Independent Verification and Validation (IV&V)
• Additional Competencies/Requirements
  • Candidates must hold current TS/SCI clearance.
  • Required Certifications: DoD 8570 IAT/IAM Level III certification
  • Familiarity with XACTA/TSABI process for the IC and the SABI process for DOD.
  • Candidates must be able to commute regularly (M-F) to customer sites in the local area.
  • Ability to travel outside of the local area, up to 30% annually, is required.

Salary:
The salary for this position ranges between $165,000.00 and $185,000.00 USD. This range represents Owl Cyber Defense Solutions' good-faith estimate of the base salary for this position at the time of posting. Placement within the range will depend on factors such as relevant work experience, geographic location, education, training, certifications, key skills, internal equity, market data, and other job-related considerations. Compensation will not be below any applicable local minimum wage. This position is also eligible to participate in the Company's annual bonus program, subject to the terms and conditions of the applicable plan. Benefits:
Owl offers a comprehensive and competitive benefits package designed to support the health, financial security, and wellbeing of our employees and their families. Our benefits include medical, dental, and vision coverage, a 401(k) retirement plan with company match, generous paid time off, company-paid life insurance, and company-paid short- and long-term disability insurance. Employees may also choose from a variety of voluntary benefits and wellness programs. Specific benefit plan details, employee contribution rates, eligibility requirements, and other program information will be shared during the hiring process. About Owl Cyber Defense Solutions, LLC
Owl Cyber Defense Solutions, LLC is a fast-growing cybersecurity solutions company, holding a firm leadership position in network security and secure information transfer. It is a privately-owned US company with offices in Columbia, MD, Danbury, CT and Morrisville, NC. For more information, see https://www.owlcyberdefense.com . Owl Cyber Defense is an Equal Opportunity Employer and complies with all applicable federal employment laws and regulations. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or protected veteran status. Owl Cyber Defense endeavors to make www.owlcyberdefense.com accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at [e-mail] . This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.