Security Engineer

Powder River Industries; Alexandria (VA); On-site; USD 117,000 - 173,000; Full time

Job summary

A leading company is seeking an RMF Security Engineer in Alexandria, VA. The role requires 5 years of experience in RMF and security engineering, providing support for DoD cybersecurity initiatives, including risk assessments and compliance with NIST standards. Ideal candidates should exhibit strong technical skills and effective communication abilities.

Benefits

Medical insurance

Vision insurance

401(k)

Qualifications

• 5 years of experience with RMF and security engineering.
• Strong knowledge of NIST Risk Management Framework.
• Experience with third-party audits and compliance.

Responsibilities

• Provides end-to-end A&A support for DoD cybersecurity.
• Interprets risks and promotes compliance with DoD policies.
• Manages creation of ATO packages and conducts security tests.

Skills

RMF security controls

Cybersecurity

Risk assessments

Documenting RMF

Communication

Tools

eMASS

SCAP Compliance Checker

Job description

Direct message the job poster from Powder River Industries

This position is for a RMF security engineer and requires 5 years of experience with RMF / Sec engineering. Provides end-to-end A&A support for DoD cybersecurity, privacy, and financial controls implementation, testing, monitoring, and enforcement. Interprets risks and recommends approaches to meeting DoD compliance and cybersecurity requirements in accordance with NIST Risk Management Framework (RMF) Controls and DoD Policy.

• 5 years of experience
• Experience in mapping, implementing, interpreting, and documenting RMF security controls
• Experienced managing the eMASS cybersecurity management tool
• Experience developing and submitting at least six (6) ATO packages

Additional requirements:

• Thorough understanding of the Risk Management Framework (RMF) Assessment and Authorization (A&A) process within the federal government, including knowledge of all phases of the RMF lifecycle.
• Proven experience in assisting client risk management tasks, such as managing POA&M, conducting Security Tests and Evaluations (ST&E), creating system documentation, performing authorizations, carrying out risk assessments, handling third-party audits, ensuring compliance with NIST 800-53 standards, and performing threat assessments according to the RMF lifecycle and processes.
• Demonstrated proficiency to plan and monitor security control implementation for the protection of networks, enclaves, and information systems.
• Strong communication abilities, including working closely with highly technical administrators to enhance overall security measures.
• Ability to generate and interpret ACAS scans to identify system vulnerabilities and monitor remediation efforts or mitigation strategies.
• Working knowledge and experience implementing and evaluating manual Security Technical Implementation Guides (STIGs), Security Content Automation Protocol (SCAP), and SCAP Compliance Checker (SCC).
• Working knowledge of common assessment & authorization (A&A) application platforms e.g. eMASS, CSAM, Xacta, etc.
• Previous experience in a technical role such as a system or network administrator is a plus.

A notification to prospective applicants that reviews, and tests for the absence of any illegal drug as defined in 10 CFR 707.4, will be conducted by the employer and a background investigation by the Federal government may be required to obtain an access authorization prior to employment, and that subsequent reinvestigations may be required. If the position is covered by the Counterintelligence Evaluation Program regulations at 10 CFR part 709, the announcement should also alert applicants that successful completion of a counterintelligence evaluation may include a counterintelligence-scope polygraph examination.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Information Technology

• Industries

  IT Services and IT Consulting

Referrals increase your chances of interviewing at Powder River Industries by 2x

Inferred from the description for this job

Medical insurance

Vision insurance

401(k)

Get notified about new Security Engineer jobs in Alexandria, VA.

Security Engineer I, Security Incident Response Team (SIRT)

Washington, DC $117,000.00-$173,000.00 18 hours ago

Security Engineer I, Security Incident Response Team (SIRT)

Washington, DC $110,000.00-$165,000.00 6 months ago

Washington, DC $117,000.00-$173,000.00 1 week ago

Washington, DC $177,000.00-$251,000.00 1 week ago

Security Engineer with Cloud Operations - 100% Remote

North Bethesda, MD $55,000.00-$125,000.00 2 weeks ago

Reston, VA $70,000.00-$85,000.00 3 hours ago

Security Operations Center (SOC) Analyst - Mid

Security Operations Center (SOC) Analyst

Washington, DC $177,000.00-$251,000.00 17 hours ago

Washington, DC $213,000.00-$293,000.00 1 week ago

Washington, DC $177,000.00-$251,000.00 1 week ago

Washington, DC $147,000.00-$208,000.00 2 weeks ago

Security Engineer (SIEM/SOAR/SOC Optimization) - Mid-Atlantic region (Remote in NC, VA, WV, MD, DC, DE, NJ, or PA)

Washington, DC $147,000.00-$208,000.00 17 hours ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.