Senior RMF Cyber Security Engineer

Cherokee Federal; Denver (CO); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Medical

Dental

Vision

401K

Other benefits

Job summary

Cherokee Federal is seeking a Cyber Security Engineer III to support Reclamation IT systems, performing RMF/NIST SP 800-37 aligned tasks and delivering required security documentation. Responsibilities include maintaining SSPP artifacts, continuous monitoring, vulnerability remediation, and incident response, with emphasis on governance and compliance across system changes.

The role requires strong communication, federal security experience, and the ability to coordinate with system owners and

Qualifications

• FISMA/RMF activities aligned to NIST SP 800-37 Rev. 2, including A&A/ATO support and continuous monitoring.
• Ability to develop and maintain SSPP/SSP and related system security/privacy documentation (contingency, incident response, configuration management, continuous monitoring, risk assessments, inventories, diagrams, POA&M).

Responsibilities

• Maintain the operational cybersecurity posture for assigned IT systems and advise system owners and Enterprise ISSM on risk, changes, and security status.
• Execute RMF/ATO (A&A) activities for assigned systems, including required documentation, assessments, and ongoing compliance tasks.
• Develop, update, and maintain the SSPP and all supporting artifacts across configuration management, contingency planning, monitoring, incident response, and risk documentation.
• Perform continuous monitoring of security controls, review audit logs, identify vulnerabilities, and address OA metrics.
• Conduct technical vulnerability assessments; prioritize remediation activities with technical teams.
• Manage the POA&M lifecycle, create POA&Ms, coordinate milestones, and collect evidence for audits.
• Support incident response activities and participate in training/tests with evidence and after-action documentation.
• Conduct cybersecurity impact analyses for system changes and support change control processes.

Skills

ISSO experience

RMF/NIST SP 800-37

A&A/ATO support

SSPP/SSP documentation

communication skills

Education

Bachelor's Degree in Cyber Security, MIS, IT or similar Information Technology degree

Tools

Bison GRC

Xacta 360

Job description

Cherokee Federal is seeking a Cyber Security Engineer III to support Reclamation IT systems, performing RMF/NIST SP 800-37 aligned tasks and delivering required security documentation. Responsibilities include maintaining SSPP artifacts, continuous monitoring, vulnerability remediation, and incident response, with emphasis on governance and compliance across system changes.

The role requires strong communication, federal security experience, and the ability to coordinate with system owners and