About the company
We are seeking an experienced cybersecurity professional to oversee information system security for a U.S. Air Force program in a remote work environment. The role is listed on behalf of a partner company based in the United States.
Responsibilities
- Develop, maintain, and oversee System Security Plans (SSPs), including documentation, periodic reviews, and accreditation
- Support obtaining and maintaining Authority to Operate (ATO) approvals
- Ensure unclassified information systems comply with DoD and U.S. Air Force regulations and federal security requirements
- Lead and support RMF activities applying NIST SP 800-53 Rev 4 and Rev 5 security controls
- Serve as primary point of contact for security inspections, audits, tests, and reviews
- Maintain continuous monitoring processes, review audit logs, and use cybersecurity monitoring tools
- Review and update STIG results and ensure compliance with IAVM requirements
- Track, assess, and resolve security findings and remediation actions within POA&M management
- Ensure compliance with FISMA requirements and maintain cybersecurity information in ITIPS
- Provide tactical information security advice and oversee cybersecurity activities for IT platforms
- Support security validation testing within DevSecOps processes and across on-premises and cloud environments
- Coordinate with cybersecurity leads, contractors, and technical stakeholders
- Contribute to data strategy, data quality, and documentation of architectural standards
Requirements
- Must hold an active Secret security clearance
- Bachelor's degree in Computer Science, Cybersecurity, or related technical field
- At least 8 years of relevant cybersecurity experience
- Must hold at least one current certification: CompTIA CASP+, CISSP, CISSP Associate, or GSLC
- At least 3 years of experience with U.S. Air Force RMF security frameworks
- Working knowledge of RMF and NIST SP 800-53 Rev 4 and Rev 5 controls
- Practical experience using eMASS and supporting ATO approvals
- Experience developing System Security Plans and tracking POA&Ms
- Experience reviewing STIG results and ensuring IAVM compliance
- Hands-on experience with ACAS, Splunk, and audit log reviews
- Familiarity with security validation testing within DevSecOps
Conditions