Cybersecurity RMF Lead

Booz Allen Hamilton • Arlington, VA

11h • $62,000 - $141,000 • Hybrid

About The Position

Design, implement, and manage policies and procedures to ensure database and software security. Apply advanced consulting skills or extensive technical expertise and full industry knowledge to develop innovative solutions to complex problems. Work without considerable direction, mentor team members, and may supervise them. The position is hybrid and based in Arlington, Virginia. A Secret clearance is required.

Requirements

• At least 5 years of experience with RMF, including supporting system categorization, control selection, implementation, and continuous monitoring.
• Experience supporting Assessment & Authorization (A&A) activities such as evidence collection, POA&M updates, and security documentation.
• Experience evaluating and interpreting security controls such as NIST SP 800-53 to ensure compliance throughout the system lifecycle.
• Experience integrating Zero Trust principles into RMF packages and system security architecture.
• Secret clearance.
• Bachelor’s degree in Management Information Systems, Information Technology, Computer Science, Mathematics, Business, Engineering, or Physical Science.
• CompTIA Advanced Security Practitioner (CASP+), CompTIA Security+, or Systems Security Certified Practitioner (SSCP) certification.

Nice To Haves

• Experience leading RMF efforts across multiple systems, including providing oversight, delegating tasks, and ensuring continuous compliance throughout operations.
• Experience conducting security engineering analyses, including advising system owners on risk impacts, mitigations, and RMF-aligned design tradeoffs.
• Experience integrating RMF workflows with DevSecOps or Agile environments, including sprint-based compliance validation and continuous monitoring.
• Experience performing enterprise risk assessments, documenting findings, and advising leadership on security posture and compliance roadmaps.
• DoD 8140 CWF-aligned certifications.

Responsibilities

• Design, implement, and manage policies and procedures that ensure database and software security.
• Support RMF activities, including system categorization, control selection and implementation, and continuous monitoring.
• Support Assessment & Authorization activities, including evidence collection, POA&M updates, and security documentation.
• Evaluate and interpret security controls, such as NIST SP 800-53, to ensure compliance throughout the system lifecycle.
• Integrate Zero Trust principles into RMF packages and system security architecture.
• Develop innovative solutions to complex problems and work with limited direction.
• Mentor team members and potentially supervise them.

Benefits

• Health, life, and disability benefits.
• Financial and retirement benefits.
• Paid leave.
• Professional development.
• Tuition assistance.
• Work-life programs.
• Dependent care.
• Recognition awards for exceptional performance and demonstration of company values. The posting notes that full-time and part-time employees regularly working at least 20 hours per week are eligible for Booz Allen benefit programs, with some offerings limited for employees below that threshold.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior