Principal Engineer, Cybersecurity RMF (Onsite - Largo, FL) TS/SCI clearance required

RTX•Largo, FL

1d•$107,500 - $204,500•Onsite

About The Position

We're hiring for a Senior Information Assurance and Cybersecurity professional with extensive experience independently leading RMF, ICD 503, NISPOM, and security authorization activities for sensitive systems. Provides senior-level technical leadership across risk assessments, security control implementation and assessment, vulnerability management, continuous monitoring, compliance audits, and development of critical RMF artifacts including SSPs, SCTMs, SARs, RARs, and POA&Ms. This role will be worked onsite in Largo, FL and requires an active and transferrable TS/SCI clearance. Relocation assistance is not available.

Requirements

Typically requires a degree in Science, Technology, Engineering or Mathematics (STEM) and minimum 8 years prior relevant experience or an Advanced Degree in a related field and minimum 5 years of experience
Active and transferable U.S. government issued TS/SCI security clearance is required prior to start date
DoD 8570 IAT Level III certification (CISM, CASP or CISSP preferred)

Nice To Haves

Deep understanding of NIST SP 800-series publication
Experience conducting vulnerability scans, security assessments, and risk analysis
Knowledge of system security architecture, network protocols, and information systems
Ability to work with an extremely risk adverse customer and their policies
Ability to quickly switch tasks based on changing priorities
Ability to adapt both an offensive and defensive mindset to support securing information systems
Excellent writing, speaking, analytical, project management, organizational, and customer service skills

Responsibilities

Independently lead and execute Information Assurance (IA) and Risk Management Framework (RMF) activities for information systems processing National Security Information, from system categorization and control selection through assessment, authorization, and continuous monitoring
Provide senior-level technical expertise and recommendations under the general direction of the Information Assurance Domain Lead and/or Information Technology leadership, exercising independent judgment in resolving complex cybersecurity, compliance, and risk-management issues
Ensure applicable National Industrial Security Program Operating Manual (NISPOM) requirements are effectively implemented, operationally functional, periodically assessed, and accurately documented within the RMF process
Lead the development, review, maintenance, and presentation of RMF and ICD 503 artifacts, including System Security Plans (SSPs), Security Control Traceability Matrices (SCTMs), Security Assessment Reports (SARs), Risk Assessment Reports (RARs), Plans of Action and Milestones (POA&Ms), Continuous Monitoring Plans, security control assessment evidence, and other authorization documentation
Analyze system architectures, security controls, vulnerabilities, and operational environments to identify cybersecurity risks and develop risk-based recommendations and mitigation strategies
Develop and maintain comprehensive System Security Plans (SSPs) and supporting certification and authorization documentation, ensuring technical implementations and supporting evidence accurately reflect the operational environment
Interpret and implement applicable requirements from the NIST 800 Series, ICD 503, JSIG, DCID, NISPOM, ICD 705, and other government security policies, directives, and standards
Conduct or support technical computer and network system audits, security control assessments, vulnerability assessments, configuration reviews, and compliance evaluations to identify security gaps and validate implementation effectiveness
Work directly with Information System Security Managers (ISSMs), Security Control Assessors (SCAs), Information System Security Officers (ISSOs), system administrators, engineers, and customer personnel to review, update, defend, and explain accreditation and authorization documentation
Serve as a technical point of contact during RMF assessments, audits, inspections, customer reviews, and authorization activities, coordinating responses to findings and ensuring timely closure of identified deficiencies
Evaluate and interpret STIGs, ACAS results, vulnerability scan data, configuration baselines, and other security-hardening requirements to identify security deficiencies and develop appropriate remediation plans
Lead continuous monitoring activities and establish processes for tracking security controls, vulnerabilities, POA&Ms, configuration changes, system modifications, and other events that may affect an authorization boundary or risk posture
Provide technical leadership in the assessment and implementation of security controls across enterprise, network, host, application, and enclave environments
Identify opportunities to improve RMF processes, documentation quality, security posture, and operational efficiency; develop and implement process improvements where appropriate
Mentor and provide technical guidance to junior IA/RMF personnel, including review of security documentation, assessment evidence, control implementations, and remediation activities
Collaborate across engineering, information technology, program management, security, and functional organizations to integrate cybersecurity requirements into system development, deployment, modification, and sustainment activities
Communicate complex cybersecurity and RMF requirements clearly to technical and non-technical stakeholders and provide actionable recommendations to management and customers
Support security investigations, risk assessments, remediation activities, and other cybersecurity initiatives as required
Travel in support of program, customer, assessment, audit, and security requirements on an as-needed basis

Benefits

Medical, dental, and vision insurance
Three weeks of vacation for newly hired employees
Generous 401(k) plan that includes employer matching funds and separate employer retirement contribution, including a Lifetime Income Strategy option
Tuition reimbursement program
Student Loan Repayment Program
Life insurance and disability coverage
Optional coverages you can buy pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, ID theft protection
Birth, adoption, parental leave benefits
Carrot Health, fertility, and family planning
Adoption Assistance
Autism Benefit
Employee Assistance Plan, including up to 10 free counseling sessions
Healthy You Incentives, wellness rewards program
Doctor on Demand, virtual doctor visits
Bright Horizons, child and elder care services
Teladoc Medical Experts, second opinion program
Annual short-term and/or long-term incentive compensation programs