Senior Information System Security Officer - RMF & DoD

ASRC Federal; Maryland; On-site; USD 110,000 - 170,000; Full time

Job summary

ASRC Federal Technology Solutions LLC is seeking an experienced Information System Security Officer to support DEVCOM-CBC G-6 at Aberdeen Proving Ground, MD. This full-time, exempt role requires maintaining ATO status, RMF implementation, and compliance across unclassified and classified systems.

You will manage RMF activities, vulnerability scans, POA&Ms, STIGs, and related documentation in eMASS, while coordinating with government staff and stakeholders. An active Secret clearance is required.

Qualifications

• Bachelor’s degree (BA/BS) in Computer Science, Information Technology, Engineering, or a related field or 4 additional years of experience in lieu of the degree.
• 5 or more years of hands-on RMF EMASS Authorization duties.
• Working knowledge of DoD and Army cybersecurity regulations including Army Regulation 25-2, DoD 8140, and DoD RMF policy.
• Experience with Active Directory account management and STIG/SRG audit processes.
• Familiarity with the Army Account Validation System (AVS) or equivalent DoD workforce compliance tracking platforms.

Responsibilities

• Maintain current Authority to Operate (ATO) status for DEVCOM systems and provide RMF guidance and support to other ACC locations with similar systems.
• Develop, update, and/or modify the system-level artifacts (e.g., TTPs, plans, policies, procedures, hardware/software lists, data flow, system architecture diagrams, PIAs, Ports/Protocols/Services, MOA/MOU, etc…) and ensure they are associated with corresponding controls in eMASS.
• Obtain, run, analyze, and import all applicable vulnerability scanners and compliance checkers as required, including STIGs, Nessus/ACAS Scans, etc...
• Track and report IAVAs related to DEVCOM systems.
• Create, modify, and/or maintain all aspects of the implementation plan and test results, as defined by DOD, Army, NETCOM, and DEVCOM requirements.
• Manage Plans of Action and Milestones (POA&M), including development, status updates, milestone tracking, and closure.
• Manage assigned network packages within eMASS and maintain accurate, current authorization documentation.
• Create, modify, and/or maintain all aspects of CONMON.
• Utilize existing or develop custom solutions to facilitate RMF requirements, reduce timelines and provide up-to-date status reporting of compliance
• Update and track cybersecurity test results, implementation plans, and risk assessments.
• Evaluate STIG checklists and document compliance status, deficiencies, and required remediation actions.
• Perform first-response coordination for Negligent Disclosure of Classified Information incidents in accordance with organization SOPs for incident response
• Conduct vulnerability management activities, including identifying, tracking, and coordinating corrective actions.

Skills

RMF EMASS

Active Directory

Vulnerability management

Incident response

DoD regulations

Education

BA/BS in CS/IT/Eng

Tools

eMASS

Nessus

ACAS

AVS

Job description

ASRC Federal Technology Solutions LLC is seeking an experienced Information System Security Officer to support DEVCOM-CBC G-6 at Aberdeen Proving Ground, MD. This full-time, exempt role requires maintaining ATO status, RMF implementation, and compliance across unclassified and classified systems.

You will manage RMF activities, vulnerability scans, POA&Ms, STIGs, and related documentation in eMASS, while coordinating with government staff and stakeholders. An active Secret clearance is required.