Cybersecurity RMF Specialist

Millennium Corporation•,

8d•Remote

About The Position

Millennium Corporation is hiring a Cybersecurity RMF Specialist to work 100% REMOTE. The candidate must have an active TS/SCI clearance. The focus of this position is to develop cybersecurity policy and provide RMF support for the deployment of Storage and Compute, Network Transport, User Support, and Cyber Security in a cloud environment is support of the US Army. The ideal candidate will have the following experience w and qualifications: Risk Management Framework (RMF) 2.0. The candidate must be experienced with obtaining and maintaining Army level accreditation for innovative programs and capabilities. The candidate must demonstrate a practical knowledge of the Army’s RMF 2.0 approach to cybersecurity. They must also be able to develop plans that can clearly delineate how to work within existing policies and procedures, while supporting the redefinition of cybersecurity in relation to cloud services provided as a service in a hybrid operational environment. Continuous monitoring. The candidate must be experienced with developing a plan for and overseeing the delivery of continuous monitoring tools and capabilities that deliver accountable governance that includes cybersecurity control compliance, critical operational data, and visibility into contract Service Level Agreement (SLA) delivery. DoD level Exceptions to Policy: The candidate must be experienced with obtaining and maintaining DoD level exceptions to policy. They must be familiar with policies, procedures, and stakeholder entities involved in the process. They must also have experience working with HQDA G6 and CIO offices in support of these efforts. CSSP alignment: The candidate will have experience driving the alignment of the US Army CSSP activities, priorities, and objectives in support of US Army mission requirements. They must be able to demonstrate a knowledge of the players and organization principles and procedures at RCC-C and C5ISR. Zero Trust: The candidate must have experience with the Army and DoD Zero Trust plans and policies and how they will impact the operationalization of data-centric cybersecurity. DevSecOps (DSO): The candidate must have experience with the practical application of DSO with a focus on identifying policy and technical roadblocks that might delay or otherwise undermine the delivery of innovative capabilities. Broad view of Cybersecurity: The candidate must have experience evaluating innovative cybersecurity technologies for Federal Government clients and delivering policy and contractual implications. They must have a functional understanding of the interrelationship between operations and compliance-based cybersecurity, to include strategy, governance, risk and compliance, disaster recovery, business operations, and their contractual implications. Hands on experience with Microsoft Azure security product (MDE, Intune, and Sentinel) Data Management experience analyzing logs, SIEM and SOAR. Integration of Legacy cybersecurity infrastructure to include Trellix, Forescout, Tychon and Policy Auditor

Requirements

Active TS/SCI clearance
Experience with Risk Management Framework (RMF) 2.0
Experience obtaining and maintaining Army level accreditation for innovative programs and capabilities
Practical knowledge of the Army’s RMF 2.0 approach to cybersecurity
Experience developing plans for continuous monitoring and overseeing their delivery
Experience obtaining and maintaining DoD level exceptions to policy
Familiarity with policies, procedures, and stakeholder entities involved in obtaining DoD level exceptions to policy
Experience working with HQDA G6 and CIO offices
Experience driving the alignment of the US Army CSSP activities, priorities, and objectives
Knowledge of the players and organization principles and procedures at RCC-C and C5ISR
Experience with the Army and DoD Zero Trust plans and policies
Experience with the practical application of DevSecOps (DSO)
Experience evaluating innovative cybersecurity technologies for Federal Government clients and delivering policy and contractual implications
Functional understanding of the interrelationship between operations and compliance-based cybersecurity
Hands on experience with Microsoft Azure security product (MDE, Intune, and Sentinel)
Data Management experience analyzing logs, SIEM and SOAR
Integration of Legacy cybersecurity infrastructure to include Trellix, Forescout, Tychon and Policy Auditor
Bachelor’s degree from an accredited university and 6 Years of professional experience and 3 years of relevant Experience or Two years of relevant experience with an Associate’s degree will be considered the equivalent of a Bachelor’s degree. Four years of relevant experience will be considered equivalent to a Bachelor’s degree.

Nice To Haves

Ability to work as part of a professional diverse team and independently.
Experience evaluating and delivering recommendations on new cybersecurity technologies for Federal Government clients.
Deep understanding of the relationship between physical security, cyber security, and the human component.
6+ years of relevant work experience
CISSP Certification desired

Responsibilities

Develop cybersecurity policy and provide RMF support for the deployment of Storage and Compute, Network Transport, User Support, and Cyber Security in a cloud environment in support of the US Army.
Obtain and maintain Army level accreditation for innovative programs and capabilities.
Develop plans that delineate how to work within existing policies and procedures, while supporting the redefinition of cybersecurity in relation to cloud services provided as a service in a hybrid operational environment.
Develop a plan for and oversee the delivery of continuous monitoring tools and capabilities that deliver accountable governance that includes cybersecurity control compliance, critical operational data, and visibility into contract Service Level Agreement (SLA) delivery.
Obtain and maintain DoD level exceptions to policy, familiarizing with policies, procedures, and stakeholder entities involved in the process.
Work with HQDA G6 and CIO offices in support of these efforts.
Drive the alignment of the US Army CSSP activities, priorities, and objectives in support of US Army mission requirements.
Demonstrate knowledge of the players and organization principles and procedures at RCC-C and C5ISR.
Apply experience with the Army and DoD Zero Trust plans and policies and how they will impact the operationalization of data-centric cybersecurity.
Apply experience with DevSecOps (DSO) with a focus on identifying policy and technical roadblocks that might delay or otherwise undermine the delivery of innovative capabilities.
Evaluate innovative cybersecurity technologies for Federal Government clients and deliver policy and contractual implications.
Understand the interrelationship between operations and compliance-based cybersecurity, to include strategy, governance, risk and compliance, disaster recovery, business operations, and their contractual implications.
Assist with Business Development activities as required to support Millennium's strategic business objectives, which may include but not limited to participation in technical interviews, creation of technical documentation, general proposal writing support and proposal color reviews.