Senior RMF/DoD Security Officer (Secret) | eMASS Expert

ASRC Federal; Northern (KY); Hybrid; USD 120,000 - 150,000; Full time

Job summary

ASRC Federal Technology Solutions LLC seeks an experienced Information System Security Officer with a active Secret clearance to support DEVCOM-CBC TDAC at White Sands Missile Range, NM. The role focuses on RMF, risk management, and incident response across unclassified and classified systems.

Responsibilities include maintaining ATO status, developing system artifacts, conducting vulnerability assessments with STIGs/Nessus, and coordinating POA&M and CONMON processes per DoD/Army regulations.

Qualifications

• Bachelor’s degree in IT, CS, engineering, or related field, or 5 years of relevant experience.
• 5+ years of RMF EMASS authorization duties.
• Working knowledge of DoD/Army cybersecurity regs including Army 25-2, DoD 8140, and RMF.
• Experience with Active Directory account management and STIG/SRG audits.
• Familiarity with AVS or equivalent DoD compliance tracking platforms.

Responsibilities

• Maintain ATO status for DEVCOM systems and assist other locations.
• Develop and update system artifacts and ensure controls mapping in eMASS.
• Import vulnerability scans (STIGs, Nessus/ACAS) and track IAVAs.
• Create and maintain POA&M, milestones, and authorization docs.
• Maintain CONMON and RMF tooling status; report compliance.
• Coordinate vulnerability remediation and incident response per SOPs.

Skills

RMF EMASS authorization

DoD/Army regulations

Vulnerability assessment

Incident response

Communication skills

Education

Bachelor’s degree in IT/CS/Engineering or 5 years equivalent

Tools

eMASS

Nessus/ACAS

STIG/audit tooling

POA&M management

AVS familiarity

Job description

ASRC Federal Technology Solutions LLC seeks an experienced Information System Security Officer with a active Secret clearance to support DEVCOM-CBC TDAC at White Sands Missile Range, NM. The role focuses on RMF, risk management, and incident response across unclassified and classified systems.

Responsibilities include maintaining ATO status, developing system artifacts, conducting vulnerability assessments with STIGs/Nessus, and coordinating POA&M and CONMON processes per DoD/Army regulations.