jobapplier

Cybersecurity / RMF Lead

Electrosoft

About Electrosoft

  • Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers.
  • While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation.
  • We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance.
  • What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded.
  • If we’ve described you and your dream workplace, please apply and share in the many benefits and opportunities we offer.

Responsibilities

Cybersecurity / RMF Lead

  • Leads cybersecurity governance, RMF assessment and authorization, continuous authorization, control evidence, vulnerability risk management, and security integration across architecture, development, cloud, testing, release, and operations.
  • Lead the RMF and assessment-and-authorization strategy for PIEE systems and services.
  • Plan and coordinate security-control implementation, assessment, evidence, authorization packages, continuous monitoring, and POA&M management.
  • Maintain visibility into authorization status, material vulnerabilities, control deficiencies, remediation priorities, and residual risk.
  • Integrate cybersecurity requirements into architecture, development, DevSecOps pipelines, cloud environments, releases, and operational procedures.
  • Coordinate cybersecurity engineers, application vulnerability analysts, system stakeholders, assessors, Authorizing Official representatives, and delivery teams.
  • Ensure DISA STIGs, NIST controls, secure configuration, vulnerability findings, and remediation evidence are addressed and traceable.
  • Provide executive briefings, risk recommendations, metrics, and escalation of issues that could affect authorization or mission operations.

Requirements

  • At least five years of RMF/NIST assessment-and-authorization experience.
  • DoD cybersecurity experience, including security-control assessment and authorization reviews for large or complex organizations.
  • Knowledge of emerging technologies and cloud security implications.
  • Active DoD Secret clearance and IT-II / Tier 3 eligibility, as required.

Preferred

  • Direct DLA and/or PIEE RMF, cATO, or cybersecurity leadership experience.
  • Expertise with eMASS, NIST SP 800-53, DISA STIGs, POA&Ms, cloud authorization, software assurance, and continuous monitoring.
  • CISSP, CAP/CGRC, CCSP, or comparable advanced cybersecurity certification.
  • Experience integrating RMF evidence and security controls into Agile and DevSecOps delivery.
  • Electrosoft is an Equal Opportunity Employer/Veterans/Disabled

Benefits

  • The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more.