Cybersecurity RMF Lead

Booz Allen Hamilton•Arlington, VA

10d

About The Position

This role involves designing, implementing, and managing policies and procedures to ensure database and software security. The position requires applying advanced consulting skills or extensive technical expertise and full industry knowledge, developing innovative solutions to complex problems, and working with minimal supervision. The lead will also mentor and potentially supervise team members.

Requirements

5+ years of experience with RMF, including supporting system categorization, control selection, implementation, and continuous monitoring.
Experience supporting Assessment & Authorization (A&A) activities such as evidence collection, POA & M updates, and security documentation.
Experience evaluating and interpreting security controls such as NIST SP 800-53 to ensure compliance throughout the system lifecycle.
Experience integrating Zero Trust principles into RMF packages and system security architecture.
Secret clearance.
Bachelor’s degree in Management Information Systems, Information Technology, Computer Science, Mathematics, Business, Engineering, or Physical Science.
CompTIA Advance Security Practitioner (CASP+), CompTIA Security+, or Systems Security Certified Practitioner (SSCP) Certification.

Nice To Haves

Experience leading RMF efforts across multiple systems, including providing oversight, task delegation, and ensuring continuous compliance throughout operations.
Experience conducting security engineering analyses, including advising system owners on risk impacts, mitigations, and RMF aligned design tradeoffs.
Experience integrating RMF workflows with DevSecOps or Agile execution environments, including sprint-based compliance validation and continuous monitoring.
Experience performing enterprise risk assessments, documenting findings, and advising leadership on security posture and compliance roadmaps.
DoD 8140 CWF-Aligned Certifications.

Responsibilities

Design, implement, and manage policies and procedures to ensure database and software security.
Apply advanced consulting skills or extensive technical expertise and full industry knowledge.
Develop innovative solutions to complex problems.
Work without considerable direction.
Mentor and may supervise team members.
Support system categorization, control selection, implementation, and continuous monitoring within the RMF framework.
Support Assessment & Authorization (A&A) activities including evidence collection, POA&M updates, and security documentation.
Evaluate and interpret security controls such as NIST SP 800-53 to ensure compliance throughout the system lifecycle.
Integrate Zero Trust principles into RMF packages and system security architecture.
Lead RMF efforts across multiple systems, providing oversight, task delegation, and ensuring continuous compliance.
Conduct security engineering analyses, advising system owners on risk impacts, mitigations, and RMF-aligned design tradeoffs.
Integrate RMF workflows with DevSecOps or Agile execution environments, including sprint-based compliance validation and continuous monitoring.
Perform enterprise risk assessments, document findings, and advise leadership on security posture and compliance roadmaps.