Senior RMF & Cloud Security Lead for DoD IA

Socket.dev; Fort Meade (MD); On-site; USD 130,000 - 195,000; Full time

Benefits offered by this job

Health insurance

401(k)

Education assistance

Paid time off

Job summary

ASRC Federal is seeking a Lead Information Assurance Security Specialist to act as the senior cybersecurity authority for the DISA JPES/JCRM program. Responsibilities include leading RMF across multi-enclave environments, maintaining eMASS artifacts, and guiding ATO sustainment and vulnerability remediation.

The role requires coordinating with government cybersecurity personnel to implement security by design within Agile development and DevSecOps, while preserving operational delivery. U.S.

Qualifications

• Bachelor’s degree in engineering, cybersecurity, computer science, information technology, or a related discipline; four additional years of experience may be accepted in lieu of a degree.
• At least 10 years of Information Assurance, RMF, or cybersecurity experience in DoD environments.
• Direct experience with RMF, eMASS, ATO sustainment, STIG validation, vulnerability management, and POA&M remediation.
• Experience securing containerized applications and Kubernetes environments.
• Experience integrating cybersecurity controls and scanning into DevSecOps delivery.
• Experience with Azure IL6, SIPR, or comparable classified DoD-hosted environments.
• Security+ or other DoD 8140 qualification required.
• CISSP preferred.
• Active Secret clearance required at time of hire.

Responsibilities

• Lead RMF lifecycle activities and maintain required artifacts in eMASS.
• Support initial and ongoing ATO authorization and continuous-monitoring activities.
• Implement, assess, and validate STIGs for RHEL, Kubernetes, Tomcat, PostgreSQL, and web-application components.
• Direct ACAS/Nessus vulnerability scanning and analysis.
• Coordinate application-security testing using Fortify or equivalent SAST/DAST capabilities.
• Manage POA&M development, remediation, closure evidence, and risk-acceptance coordination.
• Translate cybersecurity findings into prioritized Agile backlog and sprint-remediation activities.
• Support security architecture for REST APIs, data exchange, DevSecOps pipelines, and external DoD interfaces.
• Coordinate IAVM compliance, patching, configuration validation, audit support, and security-control evidence.
• Advise technical teams on secure implementation patterns for Azure IL6, Kubernetes, databases, and multi-enclave deployments.
• Provide security status, risks, metrics, and recommendations to program and Government leadership.

Skills

RMF / eMASS

Vulnerability mgmt

DevSecOps integration

Kubernetes

Azure IL6

Secure SDLC

Security+

CISSP preferred

Cloud security

SAST/DAST

Education

Bachelor’s degree in engineering, cybersecurity, CS, or IT

Tools

eMASS

ACAS/Nessus

Fortify

Jira

Job description

ASRC Federal is seeking a Lead Information Assurance Security Specialist to act as the senior cybersecurity authority for the DISA JPES/JCRM program. Responsibilities include leading RMF across multi-enclave environments, maintaining eMASS artifacts, and guiding ATO sustainment and vulnerability remediation.

The role requires coordinating with government cybersecurity personnel to implement security by design within Agile development and DevSecOps, while preserving operational delivery. U.S.