RMF & A&A Cybersecurity Engineer - On-Site (Secret)

Quantum Sky; Virginia Beach (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Quantum Sky is seeking a Cybersecurity Engineer for a government program management office at Virginia Beach, VA. The role requires applying RMF/A&A within the SDLC and ensuring security controls across architecture, design and deployment.

You will work on-site at Dam Neck Activity, coordinating with program managers and technical stakeholders to interpret requirements, perform risk assessments, and maintain eMASS documentation. A current SECRET clearance is required.

Qualifications

• Bachelor’s Degree in computer science, cybersecurity, information systems, or related technical discipline; or an Associate’s Degree with six or more years of cybersecurity experience.
• Experience applying RMF to government or DoD systems and performing A&A activities.
• Working knowledge of NIST RMF, STIGs, and security assessment documentation.

Responsibilities

• Work on a government site in Virginia Beach, Dam Neck Activity (DNA).
• Provide cybersecurity engineering support across the SDLC by embedding security into architecture, design, development, testing, assessment, authorization, delivery and sustainment.
• Apply RMF to program information systems per NIST SP 800-37 and DoDI 8510.01.
• Implement RMF lifecycle steps to achieve Authority to Operate (ATO) and maintain system security baselines and eMASS documentation.
• Support cybersecurity architecture and A&A processes to drive ATO decisions.
• Incorporate security best practices aligned with DoD/Navy cybersecurity strategy and manage adaptations for hardware, software and applications.
• Assist government managers with information security oversight, policy analysis, IT procurement and program execution per NIST SP 800-39 and DoDI 8500.01.
• Engage with program office and technical stakeholders to interpret requirements, standards, budgets, and monitoring.
• Review ACAS vulnerability scans; assess STIGs and SCAP content for applicable components.
• Prepare and review SSPs, SAPs, RARs, A&A packages and System Requirements Traceability Matrices (SRTMs).

Skills

RMF methodology

A&A process

CSWF IAT II

CSWF IAT III

Navy/DOD policies

DISA tools

STIG Viewer

eMASS familiarity

Communication skills

Education

Bachelor’s degree in computer science/cybersecurity/info systems or related field

Associate’s degree + 6+ years cybersecurity experience

Job description

Quantum Sky is seeking a Cybersecurity Engineer for a government program management office at Virginia Beach, VA. The role requires applying RMF/A&A within the SDLC and ensuring security controls across architecture, design and deployment.

You will work on-site at Dam Neck Activity, coordinating with program managers and technical stakeholders to interpret requirements, perform risk assessments, and maintain eMASS documentation. A current SECRET clearance is required.