Senior Cyber RMF Lead for DoD A&A & OT/FRCS

QinetiQ US; Chantilly (VA); On-site; USD 150,000 - 200,000; Full time

Job summary

QinetiQ US is seeking a Senior Cybersecurity Information Systems Security Manager to provide strategic cybersecurity support to a critical client in Chantilly, VA. You will lead RMF A&A efforts, develop SSPs, and coordinate with DoD stakeholders to ensure ATOs across on-prem and cloud environments.

You will work with SCA, SCO ITX, ISO, and AO to enforce policies, monitor risk, and drive continuous improvement in security posture while operating on-site five days a week.

Qualifications

• Experience applying NIST RMF and SP 800-53/171A.
• Proficient with ACAS and Splunk Enterprise for continuous monitoring.
• OT security expertise per NIST SP 800-82 and UFC 4-010-06.
• Experience developing and maintaining ATO artifacts (SSP, DRP, IRP, CP).
• Active TS/SCI clearance with SAP eligibility.
• Bachelor's degree in IT/Cybersecurity or equivalent.
• On-site Chantilly, VA 5 days a week.

Responsibilities

• Lead RMF A&A efforts for DoD enterprise SaaS and FRCS systems, preparing SSPs and maintaining ATOs.
• Serve as liaison between engineering, SCA, SCO ITX Operations, ISO, and AO for DoD/NIST compliance.
• Execute continuous monitoring programs and conduct security checks to maintain risk posture.
• Conduct audit reviews, monitor privileged accounts, and manage data flows to prevent modifications.
• Develop and report on POA&M actions, collaborating with technical teams to close vulnerabilities.
• Draft and enforce platform cybersecurity policies aligning with JSIG, CNSSI 1253, and DoD regs.
• Maintain 100% accountability of SAP removable media with lifecycle tracking.
• Oversee AFT procedures with Two-Person Integrity and auditable transfer logging.
• Lead cybersecurity assessments of FRCS (OT) per UFC 4-010-06 and NIST SP 800-82.

Skills

NIST RMF

ACAS & Splunk

OT security

SSP & ATO artifacts

Incident Response

DoD process knowledge

Education

Bachelor's degree in IT/Cybersecurity

Tools

Nessus/SecurityCenter

Splunk Enterprise

Job description

QinetiQ US is seeking a Senior Cybersecurity Information Systems Security Manager to provide strategic cybersecurity support to a critical client in Chantilly, VA. You will lead RMF A&A efforts, develop SSPs, and coordinate with DoD stakeholders to ensure ATOs across on-prem and cloud environments.

You will work with SCA, SCO ITX, ISO, and AO to enforce policies, monitor risk, and drive continuous improvement in security posture while operating on-site five days a week.