Cybersecurity RMF Lead

Booz Allen Hamilton•Arlington, VA

1d•$62,000 - $141,000

About The Position

Design, implement, and manage policies and procedures to ensure database and software security. Apply advanced consulting skills or extensive technical expertise and full industry knowledge to develop innovative solutions to complex problems. Work without considerable direction, mentor team members, and may supervise them. The role supports Risk Management Framework (RMF) activities, including system categorization, security control selection and implementation, continuous monitoring, Assessment & Authorization (A&A), and security documentation. It also involves evaluating security controls and integrating Zero Trust principles into RMF packages and system security architecture. Applicants must hold an active Secret clearance and meet the stated education and certification requirements. The position offers an annualized projected compensation range of $62,000 to $141,000, along with benefits and professional development opportunities. The job posting does not specify a work location type.

Requirements

At least 5 years of experience with RMF, including supporting system categorization, control selection, implementation, and continuous monitoring.
Experience supporting Assessment & Authorization (A&A) activities, such as evidence collection, POA&M updates, and security documentation.
Experience evaluating and interpreting security controls such as NIST SP 800-53 to ensure compliance throughout the system lifecycle.
Experience integrating Zero Trust principles into RMF packages and system security architecture.
Secret clearance.
Bachelor’s degree in Management Information Systems, Information Technology, Computer Science, Mathematics, Business, Engineering, or Physical Science.
CompTIA Advanced Security Practitioner (CASP+), CompTIA Security+, or Systems Security Certified Practitioner (SSCP) certification.

Nice To Haves

Experience leading RMF efforts across multiple systems, including providing oversight, delegating tasks, and ensuring continuous compliance throughout operations.
Experience conducting security engineering analyses, including advising system owners on risk impacts, mitigations, and RMF-aligned design tradeoffs.
Experience integrating RMF workflows with DevSecOps or Agile execution environments, including sprint-based compliance validation and continuous monitoring.
Experience performing enterprise risk assessments, documenting findings, and advising leadership on security posture and compliance roadmaps.
DoD 8140 CWF-aligned certifications.

Responsibilities

Design, implement, and manage policies and procedures to ensure database and software security.
Develop innovative solutions to complex problems using advanced consulting skills, technical expertise, and industry knowledge.
Support RMF activities, including system categorization, control selection, implementation, and continuous monitoring.
Support Assessment & Authorization activities, including evidence collection, POA&M updates, and security documentation.
Evaluate and interpret security controls, such as NIST SP 800-53, to ensure compliance throughout the system lifecycle.
Integrate Zero Trust principles into RMF packages and system security architecture.
Mentor team members and potentially supervise them.