RMF Specialist

Nyla Technology Solutions • Annapolis Junction, MD

1d • $135,000 - $160,000

About The Position

We are seeking an Information Systems Security Officer (ISSO) to manage and enforce information assurance programs across critical defense and intelligence enclaves. The role proposes, coordinates, implements, and enforces information systems security policies, standards, and methodologies. It includes managing day-to-day security operations, conducting risk and vulnerability assessments, evaluating enterprise security solutions, and leading Assessment & Authorization (A&A) activities under the NIST Risk Management Framework (RMF). The specialist maintains Configuration Management (CM) control and prepares System Security Plans (SSPs) to ensure system compliance while enabling mission execution. An active TS/SCI clearance with polygraph is required.

The annual base salary range is $135,000–$160,000 USD, excluding discretionary bonus compensation and benefits. Actual compensation may vary based on geographic location, work experience, education, skill level, and other factors.

Requirements

• Active security clearance at the TS/SCI polygraph level.
• Demonstrated ability to propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies across programs, systems, and enclaves.
• Hands-on experience driving security authorization activities in compliance with the NIST Risk Management Framework (RMF).
• Deep experience preparing, reviewing, and updating SSPs, RARs, C&A packages, and SRTMs.
• Skill in vulnerability, threat, and risk assessment analyses supporting system accreditation and continuous monitoring.
• Experience managing system change controls, evaluating security solutions for classified information, and assessing the security impact of hardware, software, and firmware modifications.
• Bachelor’s degree in Data Science, Computer Science, Computational Linguistics, Mathematics, or a related technical discipline, plus 7+ years of professional experience in data science, NLP, or software engineering; alternatively, a high school diploma or GED plus 11+ years of specialized technical experience in lieu of a degree.

Nice To Haves

• Active IAM/IAT Level II or III certification, such as CISSP, CISM, CAP/CGRC, Security+, or CASP+.
• Experience with automated compliance and vulnerability scanning tools such as Nessus/Tenable, XACTA, STIG Viewer, or SCAP Compliance Checker.
• Familiarity with cross-domain solutions, cloud security concepts including AWS or Azure government clouds, or containerized enclave security.
• Practical experience implementing continuous monitoring strategies and managing POA&Ms.

Responsibilities

• Propose, coordinate, implement, and enforce information systems security policies, standards, and methodologies across programs, systems, and enclaves.
• Manage day-to-day information security operations.
• Conduct vulnerability, threat, and risk assessment analyses to support system accreditation and continuous monitoring.
• Evaluate enterprise security solutions for processing classified information.
• Lead security authorization activities in compliance with the NIST Risk Management Framework.
• Prepare, review, and update System Security Plans (SSPs), Risk Assessment Reports (RARs), Certification and Accreditation (C&A) packages, and System Requirements Traceability Matrices (SRTMs).
• Manage Configuration Management controls, including system change controls and security impact assessments for hardware, software, and firmware modifications.
• Support continuous monitoring and manage Plans of Action and Milestones (POA&Ms).

What This Job Offers

• Job Type: Full-time
• Career Level: Senior