RMF & A&A Cybersecurity Lead — eMASS Expert (Hybrid VA)

Command Post Technologies, Inc.; Suffolk (VA); Hybrid; USD 110,000 - 160,000; Full time

Job summary

Command Post Technologies, Inc. seeks a Cybersecurity & Accreditation Specialist in Suffolk, VA to own the RMF lifecycle and maintain audit-ready packages in eMASS for JWCC Azure environments.

You will author SSPs, Continuous Monitoring Plans, Security Assessment Reports, and POA&M, and coordinate with government leads to defend security packages. Requires Active Secret clearance, U.S. citizenship, and 7+ years of DoD cybersecurity experience.

Qualifications

• 7+ years of dedicated DoD cybersecurity and accreditation experience.
• U.S. Citizenship required.
• Active Secret clearance required.
• Bachelor’s degree in Cybersecurity, Information Systems, or related field.

Responsibilities

• Manage end-to-end RMF package execution (Steps 1-6) in eMASS for systems migrating to Azure Government (IL5/IL6).
• Author System Security Plans (SSP), Continuous Monitoring Plans, Security Assessment Reports, and Plan of Action and Milestones (POA&M).
• Assess and validate NIST SP 800-53 Rev 5 security controls, DISA Cloud Computing SRG requirements, and applicable STIG baselines.
• Liaise directly with Primary Government Project Leads, Division ISSMs, and Security Control Assessor (SCA) representatives to defend security packages.
• Translate DoD Zero Trust mandate requirements into verifiable security controls within the RMF boundary.

Skills

RMF process

SSP/POA&M authoring

NIST SP 800-53 Rev5

Liaison with government reps

eMASS experience

Education

Bachelor's degree in Cybersecurity or related field

Tools

eMASS

NIST SP 800-53 Rev5

Job description

Command Post Technologies, Inc. seeks a Cybersecurity & Accreditation Specialist in Suffolk, VA to own the RMF lifecycle and maintain audit-ready packages in eMASS for JWCC Azure environments.

You will author SSPs, Continuous Monitoring Plans, Security Assessment Reports, and POA&M, and coordinate with government leads to defend security packages. Requires Active Secret clearance, U.S. citizenship, and 7+ years of DoD cybersecurity experience.