RMF Specialist — DoD Cybersecurity (Hybrid, TS/SCI)

NV5; Camp Springs (MD); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Life insurance

FTO

401(k)

Professional development

Job summary

NV5 Geospatial is seeking an experienced RMF Specialist to lead the implementation of the Risk Management Framework for Air Force information systems, ensuring compliance with DoD and Air Force cybersecurity policies.

The role requires a TS/SCI clearance or the ability to obtain one, along with strong RMF knowledge, NIST SP 800-37/53/171, and hands-on experience with eMASS and vulnerability tools such as Nessus, ACAS, and SCAP. Collaboration with system owners and developers is essential.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Minimum of 5 years of cybersecurity experience, with at least 3 years in RMF and DoD information systems.
• Certifications such as CISSP, CAP, or equivalent are preferred.
• Ability to obtain/maintain Top Secret/SCI clearance.
• Proficiency with RMF tools (eMASS) and vulnerability assessment tools (Nessus, ACAS, SCAP).
• In-depth knowledge of NIST SP 800-37, 800-53, 800-171 and DoD Instruction 8510.01.
• Excellent written and verbal communication; strong analytical skills.

Responsibilities

• Lead RMF implementation for Air Force information systems ensuring compliance with DoD policies.
• Conduct security control assessments and validate control effectiveness.
• Perform risk assessments and recommend mitigation strategies.
• Prepare and maintain RMF documentation (SSPs, POA&Ms, risk reports).
• Implement continuous monitoring and authorization processes.
• Collaborate with system owners, developers, and stakeholders throughout the SDLC.
• Support audits and policy updates as needed.

Skills

RMF

RMF lifecycle

Security policy

Strong communication

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

eMASS

Nessus

ACAS

SCAP

Job description

NV5 Geospatial is seeking an experienced RMF Specialist to lead the implementation of the Risk Management Framework for Air Force information systems, ensuring compliance with DoD and Air Force cybersecurity policies.

The role requires a TS/SCI clearance or the ability to obtain one, along with strong RMF knowledge, NIST SP 800-37/53/171, and hands-on experience with eMASS and vulnerability tools such as Nessus, ACAS, and SCAP. Collaboration with system owners and developers is essential.