Senior Security Technical Writer - RMF & STIGs Specialist

Quantum Sky; Aurora (CO); On-site; USD 105,000 - 135,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Parental leave

Job summary

Quantum Sky seeks a Senior Security Specialist Technical Writer to lead cybersecurity documentation for the DHA EOSS contract in Aurora, CO. You will author RMF artifacts, SSPs, SARs, RARs, and related CDRLs, coordinating with ISSO/ISSM and engineers across Dev, Test, QA, and Prod.

You will translate vulnerability findings into POA&Ms, maintain STIGs, and craft security policies while ensuring DoD compliance and AWS GovCloud architecture considerations.

Qualifications

• U.S. citizenship is required for DHA program access and security clearances.
• Minimum five years of hands-on technical writing and cybersecurity documentation experience.
• Knowledge of RMF, NIST SP 800-53 controls, and DoD security policies.
• Experience producing RMF artifacts, ATO packages, and DIACAP/CTI deliverables.

Responsibilities

• Lead RMF artifact and ATO package documentation for the DHA ECS program.
• Author, review, and maintain SSP, SAR, and RAR across environments.
• Prepare and submit Contract Data Requirements Lists (CDRLs) and COOP/security architecture sections.
• Track POA&M/AOR records in eMASS and translate scan findings into remediation plans.
• Develop enterprise security policies, SOPs, and compliance guidance.

Skills

Technical Writing

Cybersecurity Documentation

RMF / NIST

Policy & SOPs

Tools

eMASS

Nessus

HBSS

Burp Suite

Splunk

Job description

Quantum Sky seeks a Senior Security Specialist Technical Writer to lead cybersecurity documentation for the DHA EOSS contract in Aurora, CO. You will author RMF artifacts, SSPs, SARs, RARs, and related CDRLs, coordinating with ISSO/ISSM and engineers across Dev, Test, QA, and Prod.

You will translate vulnerability findings into POA&Ms, maintain STIGs, and craft security policies while ensuring DoD compliance and AWS GovCloud architecture considerations.