RMF Specialist: Air Force Cybersecurity & Compliance Lead

NV5; Tampa (FL); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Life insurance

401(k) plan

Professional development

Job summary

NV5 Geospatial is seeking a dedicated RMF Specialist in Tampa, FL to oversee RMF implementation for Air Force information systems. You will lead security control assessments, risk analyses, and documentation while ensuring continuous monitoring and authorization.

Hybrid work and Top Secret/SCI eligibility are required. Ideal candidates have 5+ years in cybersecurity with RMF focus, plus certifications such as CISSP or CAP.

Qualifications

• Bachelor's degree in Cybersecurity, IT, CS or related field.
• 5+ years in cybersecurity with 3+ years RMF/DoD experience.
• Must pursue/possess CISSP, CAP or equivalent certifications.
• Ability to obtain and maintain Top Secret/SCI clearance.
• Proficiency with RMF tools (eMASS) and vulnerability assessment tools (Nessus, ACAS, SCAP).
• Strong knowledge of NIST SP 800-37, 800-53, 800-171 and DoD 8510.01.

Responsibilities

• Lead RMF implementation for Air Force information systems.
• Conduct security control assessments and validate control effectiveness.
• Perform risk assessments to identify vulnerabilities and mitigation.
• Prepare SSPs, POA&Ms, and Risk Assessment Reports.
• Implement and manage continuous monitoring and authorization.
• Collaborate with system owners and developers on security requirements.
• Support internal and external audits and inspections.
• Ensure alignment with Air Force cybersecurity policies and regulations.

Skills

RMF expertise

Cybersecurity

Communication

Analytical thinking

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

eMASS

Nessus

ACAS

SCAP

Job description

NV5 Geospatial is seeking a dedicated RMF Specialist in Tampa, FL to oversee RMF implementation for Air Force information systems. You will lead security control assessments, risk analyses, and documentation while ensuring continuous monitoring and authorization.

Hybrid work and Top Secret/SCI eligibility are required. Ideal candidates have 5+ years in cybersecurity with RMF focus, plus certifications such as CISSP or CAP.