Risk Management Framework (RMF) Specialist

ManTech • Norfolk, VA

262d

About The Position

Shape the future of defense with ManTech! Join a team dedicated to safeguarding our nation through advanced tech and innovative solutions. Since 1968, we've been a trusted partner to the Department of Defense, delivering cutting-edge projects that make a real impact. Dive into exciting opportunities in Cybersecurity, IT, Data Analytics and more. Propel your career forward and be part of something extraordinary. Your journey starts now—protect and innovate with ManTech! ManTech seeks a motivated, career and customer-oriented Risk Management Framework (RMF) Specialist to join our team in Norfolk, VA. This position is onsite.

Requirements

• Bachelor's of Science degree with 8+ years of experience or 12+ years of IA experience in lieu of degree
• Current DoD 8570 baseline certification for IAM III
• Expert in Risk Management Framework (RMF), NIST, ICD, and CNSS standards
• Expert with network technologies (LAN & WAN) and best practices within a classified environment to include crypto and key management
• STIG compliance, SCC and STIG Viewer experience, and ACAS expertise
• Expert with Microsoft Windows, Linux, and system virtualization in a secure network environment

Nice To Haves

• Past or current ISSM/ISSO experience
• Security+ or CISSP, GCIH a plus
• DoD IS knowledge and experience
• Background or understanding of System Security Plans (SSP)
• Security hardening scripting/automation experience
• Microsoft OS Certification (MCSE Win 7 or other)
• Linux certification (RHCSA, CompTIA Linux, LCFS/LCFE, etc.)

Responsibilities

• Lead the creation and maintenance of cybersecurity operations-related Policies and Procedures, Administrative Guides, Plans, and Technical Documentation
• Offer security guidance throughout system lifecycles in collaboration with engineers, administrators, and software developers
• Prepare impact and risk assessment reports on residual risks, including identifying false positives and nonapplicable findings, for use by NCTE's cybersecurity and risk management leadership
• Support cybersecurity and risk management workflow actions and change request tickets within NCTE's change management system, including reviewing, approving, or addressing risk management aspects of change requests
• Provide technical guidance to engineers, software developers, and system administrators to support vulnerability remediation, STIG compliance, patching, and code security measures required to achieve compliance
• Review and update IS Authorization documentation (Body of Evidence) to support IS Assessment and Authorization (Certification/Accreditation) activities
• Work in a constantly changing regulatory environment with short, mid, and long-term timelines for remediating any non-compliance

What This Job Offers

• Job Type: Full-time
• Industry: Professional, Scientific, and Technical Services
• Education Level: Bachelor's degree