RMF Specialist – Air Force Cybersecurity (Top Secret/SCI)

NV5, Inc.; San Antonio (TX); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Life insurance

401(k)

Job summary

NV5, Inc. seeks an experienced RMF Specialist to oversee cybersecurity processes for Air Force information systems. You will identify, assess, and mitigate risks, driving RMF lifecycle activities from planning to authorization.

Responsibilities include conducting security control assessments, preparing SSPs and risk reports, and ensuring continuous monitoring. Collaboration with stakeholders is essential to integrate security across the system development lifecycle.

Qualifications

• Bachelor’s degree in cybersecurity, IT, CS or related field.
• 5+ years in cybersecurity with at least 3 years in RMF/DoD information systems.
• CISSP, CAP or equivalent security certifications preferred.
• Ability to obtain and maintain Top Secret/SCI clearance.
• Proficient in RMF tools (eMASS) and vulnerability assessment tools (Nessus, ACAS, SCAP).
• Deep knowledge of NIST SP 800-37/800-53/800-171 and DoD 8510.01.
• Strong verbal and written communication; detail‑oriented and proactive.

Responsibilities

• Lead RMF implementation for Air Force information systems and ensure DoD/compliance.
• Conduct security control assessments and validate control effectiveness.
• Perform risk assessments and recommend mitigations.
• Prepare and maintain RMF artifacts: SSPs, POA&Ms, risk reports.
• Implement continuous monitoring and authorization processes.
• Collaborate with system owners and developers to embed security requirements.
• Support audits and inspections related to information security.
• Align with Air Force cybersecurity policies and update policies as needed.

Skills

RMF knowledge

Analytical skills

Communication skills

Problem solving

Team collaboration

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

eMASS

Nessus

ACAS

SCAP

Job description

NV5, Inc. seeks an experienced RMF Specialist to oversee cybersecurity processes for Air Force information systems. You will identify, assess, and mitigate risks, driving RMF lifecycle activities from planning to authorization.

Responsibilities include conducting security control assessments, preparing SSPs and risk reports, and ensuring continuous monitoring. Collaboration with stakeholders is essential to integrate security across the system development lifecycle.