Senior Cyber Risk & FedRAMP Specialist

UNAVAILABLE; McLean (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

The Cyber Risk Management Specialist (CRMS) will specialize in RMF, FedRAMP, ATO, and continuous monitoring across cloud environments, with emphasis on DevSecOps and security hardening. The role requires deep knowledge of NIST SP 800-37, 800-53, and 800-137, and the ability to align compliance with business needs in a fast-paced federal contracting setting.

You will lead security controls assessment, coordinate audits with system owners and 3PAOs, support security documentation, and advise on

Qualifications

• Masters level or higher in cyber/FISMA related field with strong RMF/FedRAMP background.
• Experience with RMF, FedRAMP, continuous monitoring and ATO processes for federal systems.
• Ability to obtain U.S. government clearance.

Responsibilities

• Integrate RMF and FedRAMP security into SDLC and DevOps practices.
• Assess and authorize security controls to support ATO and continuous monitoring.
• Coordinate with 3PAOs, CSPs, and system owners for compliance activities.
• Lead security control implementations across cloud environments (IaaS, PaaS, SaaS).
• Prepare and respond to audits, data calls, and security assessments.
• Advise on FedRAMP requirements and evidence packages for authorization.
• Maintain ongoing risk assessments and remediation tracking.

Skills

RMF knowledge

FedRAMP

DevSecOps

NIST SP 800-37

ISCM

Cloud security

Audits

Education

Master's Degree in Cyber/FISMA

Bachelor's Degree in CS/IS

No degree with 12 years in cyber/FISMA

Tools

CISSP

CASP

CISA

CISM

GSLC

CCSP

CAP/CGRC

AWS Certified Solutions Architect

AWS Certified Security

MCSE Cloud Platform and Infrastructure

Job description

The Cyber Risk Management Specialist (CRMS) will specialize in RMF, FedRAMP, ATO, and continuous monitoring across cloud environments, with emphasis on DevSecOps and security hardening. The role requires deep knowledge of NIST SP 800-37, 800-53, and 800-137, and the ability to align compliance with business needs in a fast-paced federal contracting setting.

You will lead security controls assessment, coordinate audits with system owners and 3PAOs, support security documentation, and advise on