Senior Cybersecurity Internal Controls Engineer (RMF/eMASS)

Interactive Process Technology LLC • Radford, VA

3d

About The Position

The Senior Cybersecurity Internal Controls Engineer will provide full cybersecurity internal controls and Risk Management Framework (RMF) support under DoDI 8500.01 and DoDI 8510.01, including enterprise eMASS and RMF services. The role supports cybersecurity compliance through RMF package development, control documentation, vulnerability remediation coordination, security reviews, and maintenance of required records.

Requirements

• Cybersecurity certification, such as CISSP.
• Active security clearance.
• 10 or more years of cybersecurity and RMF-related experience.
• Extensive experience with enterprise eMASS and RMF services.
• Skill in building RMF packages and maintaining asset lists and categorizations.
• Ability to schedule and coordinate system validation reviews.
• Experience producing control compliance artifacts.
• Knowledge of ACAS and STIG reports and experience coordinating fixes.
• Experience creating, tracking, and maintaining POA&Ms.
• Ability to run annual security reviews.
• Experience with COOP and incident response testing.
• Ability to maintain PPSM and circuit registry records.
• Experience with software assurance reviews and recording items in eMASS POA&Ms.
• Experience with security compliance and control documentation.

Nice To Haves

• Bachelor's degree in computer science or equivalent experience.
• Familiarity with DoDI 8500.01 and DoDI 8510.01.
• Strong analytical, problem-solving, communication, and coordination skills.
• Experience with DoD enterprise monitoring tools and practices.
• Incident response experience.
• Understanding of COOP and communication plans.
• Ability to work well on a team and with many stakeholders.

Responsibilities

• Build RMF packages and maintain asset lists and categorizations.
• Schedule and coordinate system validation reviews.
• Produce artifacts demonstrating control compliance.
• Review ACAS and STIG reports and coordinate fixes.
• Create, track, and maintain POA&Ms.
• Run annual security reviews and participate in COOP and incident response testing.
• Maintain Ports, Protocols, and Services Management (PPSM) and circuit registry records.
• Participate in software assurance reviews and ensure findings are recorded in eMASS.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior