RMF and Cybersecurity Lead

Amyx, Inc.•O'Fallon, IL

About The Position

Amyx is seeking to hire a RMF and Cybersecurity Lead to join our Defense client in O'Fallon, IL. This position will supports RMF compliance, cybersecurity operations, and continuous monitoring.

Requirements

Experience supporting USTRANSCOM and working on at USTC.
Experience supporting DoD.
Demonstrated experience producing recurring cybersecurity deliverables (POA&M status, compliance reports, hygiene/scorecards, risk assessments)
Familiarity with NIST 800‑171 SSP expectations (contractor System Security Plan requirement).

Nice To Haves

Secret Clearance.
Must have one CE cert/certificate aligned to OS/tools/devices supported (categories include OS, network support/defense, cloud/virtualization, applications, etc.

Responsibilities

Develops and maintains RMF artifacts (ATO/ATC, POA&Ms).
Supports vulnerability management and security audits.
Provides cybersecurity reporting and metrics.
Must be experience in RMF compliance & documentation: develop/maintain documentation to obtain ATO/ATC; identify evidence/artifacts for A&A packages; manage RMF artifacts (risk acceptance memos, POA&Ms, etc.); update security documentation in eMASS or Government-selected tools; provide A&A metrics.
Continuous monitoring & vulnerability management: upload code/security scans/checklists; document AP/CCI mappings; track POA&Ms; audit POA&M items; validate privileged user accounts as needed.
Compliance auditing & PPSM: support PPSM registry activities; ensure declared PPSMs follow applicable instructions; support internal/external security audits (including financial/privacy audits).
Cybersecurity operations: log analysis; support control audits/assessments; assess security control effectiveness; develop metrics and security posture reporting; support change management review for security impacts.
Incident reporting awareness: align reporting actions with DFARS 252.204
Must have the ability to communicate accurate information