Senior RMF Specialist/ISSO

E2zintegral; Alabama; Vor Ort; USD 80.000 - 110.000; Vollzeit

Benefits dieser Stelle

Medical, Dental & Vision Insurance

Flexible Spending Accounts

Short-Term and Long-Term Disability Insurance

Life Insurance

Paid Time Off & Holidays

Earned Bonuses & Awards

Professional Training Reimbursement

Employee Assistance Program

Zusammenfassung

E2zintegral is seeking a Senior RMF Specialist/ISSO in Alabama to guide IT systems through the Risk Management Framework lifecycle for US Army G2's Intelligence Division. Responsibilities include leading RMF execution, managing system documentation, and implementing continuous monitoring strategies. Candidates should have a BA/BS and at least 5 years of experience with complex DoD IT systems. The position offers competitive benefits including medical insurance and professional training reimbursement.

Qualifikationen

• 5+ years of hands-on experience applying RMF to complex DoD IT systems.
• Possess current, industry-standard certifications meeting DoD 8570/8140 requirements.
• Demonstrated mastery of eMASS and vulnerability scanning tools.

Aufgaben

• Lead RMF process from system categorization and security control selection to assessment.
• Develop and maintain required RMF documentation like SSP and SAR.
• Manage system's security posture within eMASS.

Kenntnisse

Risk Management Framework (RMF)

eMASS

Vulnerability scanning tools (ACAS/Nessus)

COMSEC

Security compliance checkers (SCAP)

DoD IT systems experience

Top Secret/SCI security clearance

Ausbildung

BA/BS in a relevant field

Tools

CompTIA Security+

CCNA

RHCSA

MCSA

Jobbeschreibung

Overview

The Senior RMF Specialist/ISSO is responsible for guiding IT systems through the entire Risk Management Framework (RMF) lifecycle to achieve and maintain the Authority to Operate (ATO) for US Army G2’s Intelligence Division (AMIS-IN), Security Division (AMIS-SE), and the Special Projects Office (SPO) (AMIS-SEP).

Responsibilities

• RMF Execution: Lead all aspects of the RMF process, from system categorization and security control selection to implementation and assessment.
• Security Documentation: Develop, maintain, and update all required RMF documentation, including the System Security Plan (SSP), Security Assessment Report (SAR), and Plan of Action & Milestones (POA&M).
• eMASS Management: Manage the system's security posture within the Enterprise Mission Assurance Support System (eMASS), ensuring all data is accurate and up to date.
• Continuous Monitoring: Implement and manage a robust continuous monitoring strategy to actively assess security control effectiveness, track vulnerabilities, and manage configuration changes.
• Stakeholder Coordination: Serve as the primary security advisor to the system owner and liaise with the Authorizing Official (AO) and other key stakeholders to ensure a clear understanding of system risks and compliance status.

Qualifications

Required:

• BA/BS with a minimum 5+ years of hands‑on experience dedicated to applying RMF to complex DoD IT systems.
• Certifications: Possess current, industry‑standard certifications relevant to their specific duties (e.g., CompTIA Security+, CCNA, RHCSA, MCSA). Certifications must meet DoD 8570/8140 requirements for their assigned role (e.g., IAT Level II).
• Technical Skills: Demonstrated mastery of eMASS, vulnerability scanning tools (e.g., ACAS/Nessus), COMSEC, and security compliance checkers (e.g., SCAP).
• Top Secret/SCI security clearance.

Benefits

We offer a comprehensive total rewards package including paid parental leave and immediate vesting in our 401(k).

• Medical, Dental & Vision Insurance
• Flexible Spending Accounts
• Short-Term and Long-Term Disability Insurance
• Life Insurance
• Paid Time Off & Holidays
• Earned Bonuses & Awards
• Professional Training Reimbursement
• Employee Assistance Program

Equal Opportunity Employer/Protected Veteran/Disability