Senior DoD RMF & Cybersecurity Manager

QinetiQ U.S.; Chantilly (VA); On-site; USD 150,000 - 200,000; Full time

Job summary

QinetiQ US is seeking a Sr. Information Systems Security Manager to provide strategic cybersecurity support for a critical Chantilly client. You will lead RMF A&A, define security architecture, and oversee continuous monitoring across on-premises, cloud, PIT, and FRCS environments.

The role requires strong collaboration with DoD partners, extensive SSP/ATO experience, and active TS/SCI with SAP eligibility. On-site work five days a week in Chantilly, VA is expected.

Qualifications

• Experience applying NIST RMF and SP 800-53.
• Proficient with ACAS and Splunk for continuous monitoring.
• Experience developing and maintaining SSPs and ATO packages.
• Active TS/SCI clearance with SAP eligibility.
• On-site Chantilly, VA 5 days a week.

Responsibilities

• Lead RMF A&A efforts for DoD enterprise-level SaaS and FRCS; prepare and validate SSPs.
• Serve as liaison between engineering, SCA, SCO ITX, ISO, and AO for DoD/NIST compliance.
• Oversee continuous monitoring programs and conduct regular security checks.
• Monitor privileged user accounts, conduct audits, and review baselines and data flows.
• Develop and track Plans of Action and Milestones (POA&Ms); remediate vulnerabilities.
• Draft and enforce platform-specific cybersecurity policies and SOPs for cloud SaaS; align with JSIG, CNSSI 1253, and DoD regulations.
• Maintain accountability of SAP removable media with lifecycle tracking.
• Establish AFT procedures as Data Transfer Agent with TPI and auditable logs.
• Lead cybersecurity assessments of FRCS (HVAC, Utility Control, ECSS) per UFC 4-010-06 and NIST SP 800-82.
• Provide real-time analysis and support Incident Response activities.

Skills

RMF expertise

Security policy development

Stakeholder communication

Cross-functional collaboration

On-site coordination

Education

Bachelor's degree in IT/Cybersecurity

Tools

ACAS (Tenable Nessus/SecurityCenter)

Splunk Enterprise

Job description

QinetiQ US is seeking a Sr. Information Systems Security Manager to provide strategic cybersecurity support for a critical Chantilly client. You will lead RMF A&A, define security architecture, and oversee continuous monitoring across on-premises, cloud, PIT, and FRCS environments.

The role requires strong collaboration with DoD partners, extensive SSP/ATO experience, and active TS/SCI with SAP eligibility. On-site work five days a week in Chantilly, VA is expected.