Senior InfoSec Engineer — RMF, Zero Trust & SDLC

Quivera Enterprises, LLC; Northern (KY); Hybrid; USD 90,000 - 140,000; Full time

Benefits offered by this job

Equal opportunity employer

Tribally owned

Job summary

Quivera Enterprises LLC is seeking a seasoned cybersecurity professional to lead RMF implementation and risk management activities across complex systems. You will coordinate security assessments, develop authorization packages, and map controls to NIST SP 800-53 while supporting zero trust and enterprise security initiatives.

The role requires deep knowledge of RMF, STIGs, vulnerability management, and SDLC security, with a focus on risk reduction and continuous monitoring in a federal

Qualifications

• Extensive experience implementing NIST RMF for federal systems.
• Experience conducting security assessments and developing authorization packages.
• Strong knowledge of STIG controls and their validation.

Responsibilities

• Lead RMF implementation and authorization activities across systems.
• Conduct security assessments and deliver authorization packages.
• Develop and maintain security documentation for A&A activities.
• Evaluate control effectiveness and coordinate remediation with stakeholders.
• Support SDLC security integration and disaster recovery requirements.

Skills

NIST RMF

Security assessments

STIG compliance

Zero Trust

Vulnerability management

Contingency planning

SDLC security

Policy development

Threat analysis

Security documentation

Education

Bachelor's degree in Cybersecurity

Master's degree in related field

Eight years of experience without a degree

Tools

STIG tooling

NIST 800-53 tooling

Security assessment tools

Job description

Quivera Enterprises LLC is seeking a seasoned cybersecurity professional to lead RMF implementation and risk management activities across complex systems. You will coordinate security assessments, develop authorization packages, and map controls to NIST SP 800-53 while supporting zero trust and enterprise security initiatives.

The role requires deep knowledge of RMF, STIGs, vulnerability management, and SDLC security, with a focus on risk reduction and continuous monitoring in a federal