Cybersecurity RMF Specialist

Dark Wolf Solutions • Herndon, VA

21h • Hybrid

About The Position

Dark Wolf is seeking a Cybersecurity RMF Specialist to serve as the primary regulatory and technical authority for authorizing mission-critical software in DoD Impact Level 5 (IL5) and Impact Level 6 (IL6) environments. The role independently manages the end-to-end Risk Management Framework (RMF) process, including developing a comprehensive Body of Evidence (BoE) for Continuous Authorization to Operate (cATO). The specialist serves as the principal liaison among Platform Engineers, Developers, and Government stakeholders, including Security Control Assessors (SCA) and Authorizing Officials (AO), to apply cybersecurity principles within a DoD operational ecosystem and maintain software readiness for national security systems.

The position requires a hybrid presence in Northern Virginia. The estimated compensation is $120,000–$150,000, commensurate with experience. This is a direct, full-time W2 role; the company does not engage third-party staffing agencies, C2C, or 1099 independent contractors for this position. Applicants must verify identity, confirm U.S. citizenship, and complete required employment eligibility verification upon hire. Dark Wolf is an EEO/AA employer and welcomes applicants from protected categories, including minorities, women, veterans, and people with disabilities.

Requirements

• At least 5 years of relevant cybersecurity experience, focused on DoD RMF and IL5/IL6 authorizations.
• Direct experience with DoD Cloud Service Provider ecosystems, such as AWS GovCloud.
• Ability to independently lead coordination with government Security Control Assessors (SCA) and mission partners.
• Experience with eMASS (Enterprise Mission Assurance Support Service) for managing DoD system records.
• Knowledge of security scanning tools, including static and dynamic analysis tools.
• Experience using Atlassian tools such as Jira and Confluence.
• Confidence providing briefings and presentations and conducting or guiding meetings with senior leadership and stakeholders.
• DoD 8140/8570 IAM Level III certification, such as CISSP, CISM, or GSLC.
• U.S. citizenship and an active DoD Secret security clearance.
• B.A. or B.S. in Information Security, Computer Science, or a related discipline.

Nice To Haves

• Experience with the DoD Architecture Framework (DoDAF).
• Experience with the Cloud Computing Security Requirements Guide (CC SRG).
• Experience with the DoD DevSecOps Fundamentals Playbook.
• Experience with DevSecOps platforms such as GitLab or GitHub.
• Understanding of container-based application development tools such as Docker, Docker Compose, and Kubernetes.
• Understanding of Continuous ATO (cATO) concepts and integration of automated security testing into DevSecOps pipelines.

Responsibilities

• Lead the end-to-end RMF process for DoD IL5 and IL6 environments, managing eMASS security controls, artifacts, POA&Ms, and authorization documentation to maintain system compliance and security posture.
• Manage Continuous Monitoring (ConMon) activities and security artifacts, including maintaining, reviewing, validating, and submitting STIG checklists, architecture and network diagrams, hardware and software inventories, PPSM documentation, SBOMs, container image inventories, and supporting evidence to the DHA Cybersecurity Team.
• Coordinate ACAS/SAST vulnerability scans, IAVA compliance, and remediation efforts with the DHA Cybersecurity Team and Platform Engineers; track vulnerabilities and compliance findings through remediation and closure.
• Translate DISA STIG, SRG, and NIST 800-53 requirements into actionable technical requirements; partner with Platform Engineers to implement security controls through Infrastructure as Code (IaC) and perform security control assessments.
• Serve as the primary cybersecurity liaison for government stakeholders; support CCB/change requests and brief DHA cybersecurity teams and senior leadership on system security posture, compliance status, risks, remediation efforts, and continued authorization.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level