Senior Security Risk Manager & RMF Lead

LinTech Global, a Dexian company; Washington (District of Columbia); On-site; USD 150,000 - 175,000; Full time

Job summary

Dexian Government Solutions is seeking a Senior Security Risk Management Engineer to lead RMF and A&A activities for the DHS CIETS program in the DC Metro area. You will serve as the senior technical lead for RMF implementation, A&A, security control implementation, enterprise risk analysis, and cybersecurity compliance engineering.

Collaborating with ISSOs, ISSMs, SCAs, and Authorizing Officials, you will ensure systems achieve and maintain authorization while managing risk across the DHS I&A

Qualifications

• Experience in A&A, FISMA compliance, IC cybersecurity policy and standards, continuous monitoring, CDS, and secure cloud and hybrid engineering.
• Experience automating A&A and continuous monitoring activities.
• Experience applying NIST 800 series and CNSSI 1253 security controls and RMF principles and guidance.

Responsibilities

• Lead RMF activities across assigned systems.
• Develop and maintain authorization documentation.
• Support ATO, ATC, and ongoing authorization activities.
• Ensure security controls are properly implemented and documented.
• Coordinate with ISSOs, ISSMs, SCAs, and Authorizing Officials throughout the authorization lifecycle.
• Assist in preparing and maintaining authorization packages.
• Conduct cybersecurity risk assessments.
• Analyze technical, operational, and architectural risks.
• Identify system vulnerabilities and control deficiencies.
• Evaluate likelihood and impact of identified risks.
• Develop risk mitigation strategies.
• Recommend compensating controls and corrective actions.
• Evaluate implementation of NIST, CNSSI, DHS, and Intelligence Community security controls.
• Validate technical control implementation.
• Assess effectiveness of security safeguards.
• Support remediation of control weaknesses.
• Ensure security requirements are incorporated into system designs and architectures.
• Support continuous monitoring programs.
• Review vulnerability assessment results.
• Analyze POA&M status and remediation activities.
• Monitor ongoing compliance with authorization requirements.
• Track risk trends and emerging cybersecurity concerns.
• Support enterprise cybersecurity risk management activities.
• Evaluate cross-system and enterprise-wide risks.
• Provide recommendations regarding risk acceptance and mitigation.
• Support executive risk reporting.
• Assist Government leadership in understanding aggregate cybersecurity risk.
• Conduct technical reviews of system architectures.
• Assess proposed system changes for security impact.
• Evaluate cloud security implementations.
• Support modernization initiatives and technology assessments.
• Participate in architecture review boards and engineering reviews.
• Support OIG, FISMA, JCIP, and other cybersecurity inspections.
• Provide technical evidence supporting compliance assessments.
• Respond to audit findings and corrective action requirements.
• Assist in maintaining audit readiness across the portfolio.

Skills

RMF leadership

A&A processes

Risk assessment

NIST 800 series

CNSSI 1253

Job description

Dexian Government Solutions is seeking a Senior Security Risk Management Engineer to lead RMF and A&A activities for the DHS CIETS program in the DC Metro area. You will serve as the senior technical lead for RMF implementation, A&A, security control implementation, enterprise risk analysis, and cybersecurity compliance engineering.

Collaborating with ISSOs, ISSMs, SCAs, and Authorizing Officials, you will ensure systems achieve and maintain authorization while managing risk across the DHS I&A