Cybersecurity Specialist

Fusion Technology•Aberdeen, MD

1d•Onsite

About The Position

The IT Certified Professional manages day-to-day Risk Management Framework (RMF) lifecycle documentation, compliance reporting, and hardware/software reconciliation for Air Traffic Control (ATC) systems, under the guidance of the Senior IT Systems Solutions Architect. The role supports RMF lifecycle reporting, security authorization documentation, vulnerability management, assessment evidence preparation, and government compliance data calls. The position is located in Aberdeen, Maryland.

Requirements

Active DOD Secret clearance.
Bachelor's degree.
At least 5 years of experience supporting RMF lifecycle reporting.
Experience with hardware/software reconciliation and configuration baseline management.
Experience maintaining eMASS records, SSPs, control implementation statements, POA&Ms, and continuous monitoring reports.
Experience running and analyzing STIG/SCAP and ACAS/Nessus scans, documenting findings, and tracking remediation.
Clear technical writing skills for formal authorization packages.
A government-approved SecurityX (formerly CASP+), CISSP, or CySA+ certification.

Responsibilities

Manage day-to-day RMF lifecycle documentation and compliance reporting for ATC systems.
Reconcile hardware and software inventories and manage configuration baselines.
Maintain eMASS records, System Security Plans (SSPs), control implementation statements, Plans of Action and Milestones (POA&Ms), and continuous monitoring reports.
Align authoritative hardware/software inventories and configuration baselines with vulnerability scan results.
Run and analyze STIG/SCAP and ACAS/Nessus scans, document findings, and track remediation.
Assemble compliance evidence for security control assessments and respond to assessor data calls.
Develop boundary diagrams, data flows, and PPS lists (DCWF 651).
Support IAVA, FISMA, and Army data calls.
Write technical content for formal authorization packages.