Senior Cybersecurity & RMF Specialist (InfoSec)

US Warfighting Acquisition University; Huntsville (AL); On-site; USD 100,000 - 130,000; Full time

Job summary

US Warfighting Acquisition University seeks an Information Systems Security Officer (ISSM) to lead RMF lifecycle activities, support FedRAMP, and oversee continuous monitoring for DoD-acquired information systems. The role emphasizes risk management, policy development, and collaboration with stakeholders across acquisition and engineering teams.

The ideal candidate will bring experience in RMF artifacts, security control implementation, and cross-functional leadership to ensure mission-critical

Qualifications

• Attention to Detail: review IT-related work for accuracy and consistency with standards.
• Customer Service: maintain relationships with customers and identify IT products meeting needs.
• Oral Communication: brief management and IT staff on status and explain technical details to non-technical audiences.
• Problem Solving: identify alternatives by gathering information from multiple sources.

Responsibilities

• Supporting RMF lifecycle activities: categorization, control implementation, assessment prep, and continuous monitoring.
• Familiarity with FedRAMP authorization, continuous monitoring, cloud security control implementation, and secure configurations for federal clouds.
• Preparing, reviewing, and maintaining RMF artifacts: SSPs, control statements, SARs, POA&Ms, risk documentation, and monitoring records.
• Analyzing vulnerability scans, configuration data, audit findings, and system changes to identify risk and guide remediation.
• Understanding Zero Trust architecture initiatives across ICAM, device compliance, network segmentation, and data protection.

Skills

Attention to Detail

Customer Service

Oral Communication

Problem Solving

Job description

US Warfighting Acquisition University seeks an Information Systems Security Officer (ISSM) to lead RMF lifecycle activities, support FedRAMP, and oversee continuous monitoring for DoD-acquired information systems. The role emphasizes risk management, policy development, and collaboration with stakeholders across acquisition and engineering teams.

The ideal candidate will bring experience in RMF artifacts, security control implementation, and cross-functional leadership to ensure mission-critical