Specialist, Cyber Intelligence
About The Position
An experienced cybersecurity professional who leads Risk Management Framework (RMF) activities, system authorization, continuous monitoring, and information assurance across multiple classified collateral programs. The role contributes to the cybersecurity function by applying technical and regulatory knowledge to support information-system security, compliance, and authorization. It works with limited supervision and collaborates with internal stakeholders, external assessors, and customers. The specialist recommends and implements improvements to cybersecurity processes, documentation, and control execution to strengthen security posture, improve audit readiness, and reduce organizational risk.
Requirements
- Bachelor’s degree with 5+ years of relevant experience.
- Demonstrated experience developing and managing RMF authorization packages.
- Strong understanding of government cybersecurity policies, security controls, and compliance processes.
- Experience leading system authorization, continuous monitoring, audit response, and risk management activities.
- Ability to assess system implementations and translate findings into actionable guidance.
- Experience interpreting vulnerability and log data using Nessus/Tenable, ACAS, or SIEM tools.
- Experience supporting classified systems under DAAG, NISPOM, ICD 503, and NIST 800-53 Rev. 5.
- Demonstrated experience creating and managing POA&Ms and supporting A&A processes.
- Experience with DISA STIGs and SCAP tools.
- Strong communication, documentation, coordination, and analytical skills.
- Ability to mentor team members and work collaboratively across programs.
- Security+ CE certification and an active Secret clearance with TS eligibility.
Nice To Haves
- Experience with eMASS.
- ISSO/ISSM experience under the DAAG.
- Experience with audit reduction tools such as Splunk.
- Knowledge of Linux or Unix operating systems.
- Familiarity with DoD or military environments.
- Ability to drive consensus and effectively communicate recommendations.
- Flexibility to adjust to changing requirements, schedules, and priorities.
Responsibilities
- Lead development, maintenance, and execution of RMF authorization packages throughout the system lifecycle.
- Assess systems for compliance with security baselines, configurations, and applicable government policies.
- Interpret and implement cybersecurity requirements aligned with NIST, CNSSI, DoD, JSIG, and customer directives.
- Guide engineering and program teams on implementing and sustaining required security controls.
- Analyze system changes and architectures for cybersecurity and authorization impacts.
- Conduct security control assessments, validate control effectiveness, and identify residual risk.
- Support and execute Security Test & Evaluation (ST&E) activities and document results.
- Prepare and maintain System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), risk assessments, and supporting artifacts.
- Track vulnerabilities and deficiencies through remediation or risk acceptance.
- Support continuous monitoring, including vulnerability review, audit analysis, and change management.
- Coordinate audits, inspections, and compliance reviews and support resolution of findings.
- Evaluate new technologies, updates, and system changes for security and compliance implications.
- Mentor junior team members and provide subject matter guidance on RMF processes and documentation.
- Communicate cybersecurity posture, risks, and requirements to technical and non-technical stakeholders.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
