SkillBridge : Cybersecurity; RMF & Compliance

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Salary 40 Hrs Professional Newport News, VA, US

30+ days ago Requisition

Who We Are:

Headquartered in Washington, DC, Versar Global Solutions provides full mission lifecycle solutions for challenges faced by our government and commercial Customers in the natural, built, and digital environments. With team members around the world and a rich legacy spanning more than 50 years, Versar Global Solutions delivers a broad array of planning, analysis and risk management solutions, project and program management, operations and maintenance services, and information technology applications for environmental management and remediation projects, mission critical facilities and installations, and in support of readiness and contingency operations.

Who You Are:

Versar is seeking a Cybersecurity professional with experience in Risk Management Framework (RMF), compliance standards, and security governance to join its Skill Bridge Internship Program. This internship provides transitioning service members hands-on civilian experience supporting the design, implementation, and continuous monitoring of cybersecurity controls, while helping ensure compliance with federal and industry standards such as NIST, FedRAMP, SOC 2, ISO 27001, and CMMC
. The ideal candidate has experience or exposure to developing RMF artifacts, managing security tools, and supporting authorization processes.

What You’ll Do:

RMF & Compliance

• Support and execute the Risk Management Framework (RMF) lifecycle
• Develop, manage, and maintain RMF documentation and artifacts, including:
• System Security Plan (SSP)
• Security Assessment Plan (SAP)
• Plan of Action and Milestones (POA&M)
• Continuous Monitoring Strategy
• Privacy Impact Assessments (PIA)
• Perform security control assessments aligned with NIST SP 800-53
• Assist in system authorization and ATO packages

Policy & Governance

• Develop, review, and update cybersecurity policies, procedures, and standards
• Ensure alignment with:
  • NIST frameworks and guidance
  • CMMC
    , SOC 2,
    ISO 27001
  • FedRAMP requirements
• Support audits, assessments, and compliance reporting activities
• Support risk management and incident response

Security Operations & Tools

• Work with and manage security tools and platforms such as:
  • SIEM solutions (e.g., Splunk, Microsoft Sentinel, ACAS, Tanium)
  • eMASS, Xacta for RMF documentation and tracking
• Monitor system security posture and support continuous monitoring activities
• Analyze security events and support incident response efforts as needed
• Support security compliance for cloud environments (AWS, Azure, or GCP)
• Implement and assess cloud security controls aligned with FedRAMP/NIST guidance
• Collaborate with engineering teams to enforce secure configurations

What You’ll Bring:

Minimum one of the following certifications (or equivalent):

• CompTIA Security+ CE |Certified in Governance, Risk and Compliance (CGRC) | CompTIA Advanced Security Practitioner (CASP+)
• Bachelor’s degree in Cybersecurity related fields OR
  3-5+ years of experience in cybersecurity, compliance, or risk management roles
• Strong analytical and problem-solving abilities
• Excellent written and verbal communication skills
• Ability to work independently and collaboratively in a team environment
• Detail-oriented with a focus on compliance, accuracy and completeness
• Must possess at least a Secret clearance
• Must be proficient in English, both written and verbal, to ensure effective communication and collaboration.
• Comply with company drug and alcohol policy.
• Be authorized to work in the US or will be authorized by the successful candidate’s start date.

D…