RMF & NIST Information Security Specialist

Guidehouse Inc.; United States; On-site; USD 74,000 - 124,000; Full time

Benefits offered by this job

Medical, Rx, Dental & Vision Insurance

401(k) Retirement Plan

Tuition Reimbursement

Employee Assistance Program

Paid Holidays

Job summary

Guidehouse Inc. is seeking an IT Cyber Security professional to support RMF implementations across authorization boundaries and assist in system categorization in line with FIPS 199 and NIST SP 800-60 guidance.

You will help identify, document, and maintain NIST SP 800-53 r5 controls, develop security documentation, and support assessments and authorization activities. Minimum 3 years in cybersecurity with a Security+ is required.

Qualifications

• Bachelor's degree in computer science, information technology, or cybersecurity.
• Current Security+ certificate.
• Minimum 3 years of experience in cybersecurity.
• Experience utilizing enterprise cybersecurity risk management and governance tools.
• Experience with cloud security.
• Must be able to obtain and maintain a Federal or DoD Public Trust.
• Working knowledge of FISMA, NIST SP 800-37 Rev. 2, SP 800-53 Rev. 5, SP 800-53A.

Responsibilities

• Support the implementation and ongoing execution of the NIST RMF requirements across assigned authorization boundaries.
• Assist in system categorization per FIPS 199 and NIST SP 800-60 guidance.
• Identify, document, and maintain NIST SP 800-53 r5 security controls and tailoring.
• Develop and maintain RMF/security documentation: SSPs, POA&Ms, risk assessments, continuous monitoring docs, SOPs.
• Support security control assessments, remediation, and authorization activities.
• Identify weaknesses and coordinate corrective actions with stakeholders.
• Manage POA&Ms from monitoring results through remediation and closure.
• Assist in preparation of boundaries for ATO and reauthorization.
• Monitor compliance with FISMA and organizational policies.
• Ensure security requirements are integrated into system design and changes.
• Support continuous monitoring activities including vulnerability management and configuration management.
• Coordinate vulnerability scanning and remediation tracking.
• Assist in incident response coordination and post-action follow-ups.
• Promote best practices to maintain acceptable risk.

Skills

Security+

Cybersecurity experience

Risk management tools

Cloud security

FISMA/NIST familiarity

Blue-team operations

Education

B.S. in CS/IT/C cybersecurity

Tools

RMF/NIST framework

POA&Ms documentation

Job description

Guidehouse Inc. is seeking an IT Cyber Security professional to support RMF implementations across authorization boundaries and assist in system categorization in line with FIPS 199 and NIST SP 800-60 guidance.

You will help identify, document, and maintain NIST SP 800-53 r5 controls, develop security documentation, and support assessments and authorization activities. Minimum 3 years in cybersecurity with a Security+ is required.