RMF & ATO Information Security Specialist

Oceaneering; Suitland (MD); Vor Ort; USD 75.000 - 112.000; Vollzeit

Zusammenfassung

Oceaneering is seeking a cybersecurity professional to apply RMF and continuous monitoring in U.S. government environments.

The role emphasizes planning, coordinating, and authoring security authorization documentation to comply with Federal, DoD, and organizational policies, focusing on compliance monitoring rather than implementation. The candidate will work with application leads, sysadmins, DBAs, developers, and testers to ensure systems achieve/maintain ATO and align with security controls.

Qualifikationen

• Must have RMF, DIACAP/DoD experience and full system assessment for ATO.
• Experience drafting SSPs, ST&E Plans, SCTM, POA&Ms and other security artifacts.

Aufgaben

• Apply RMF and continuous monitoring to maximize system security.
• Collaborate with application leads, sysadmins, DBAs, developers and testers to ensure ATO.
• Draft, review and endorse security authorization artifacts and documents (SSP, ST&E, SCTM, eMASS).
• Guide complex information systems through assessment and authorization gates.
• Load artifacts (STIGs, Nessus scans) and mitigate findings.
• Maintain daily security configuration, CM, testing, and incident response coordination.
• Provide ISSO guidance to system administrators and stakeholders.

Kenntnisse

RMF knowledge

Cybersecurity principles

STIGs/Nessus familiarity

Communication

Collaboration with IT teams

Ausbildung

Associate’s Degree in information technology or computer science

Tools

ServiceNow

eMASS

STIG checklists

Nessus

SCAP tools

Jobbeschreibung

Oceaneering is seeking a cybersecurity professional to apply RMF and continuous monitoring in U.S. government environments.

The role emphasizes planning, coordinating, and authoring security authorization documentation to comply with Federal, DoD, and organizational policies, focusing on compliance monitoring rather than implementation. The candidate will work with application leads, sysadmins, DBAs, developers, and testers to ensure systems achieve/maintain ATO and align with security controls.