RMF Specialist

Data Intelligence, LLC (DI) is searching for a full time RMF Specialist to support a DoD Navy effort in Dam Neck, VA through RMF, cybersecurity engineering, and Assessment & Authorization activities. The role will support mission-critical systems and candidates must possess hands‑on experience with RMF, vulnerability management, and continuous monitoring. This is an on-site position
in Dam Neck, VA, and requires a current, active security clearance as well as an active IAM II (or higher) certification.

• Cybersecurity Engineering:
• Perform technical planning and systems engineering to ensure information assurance (IA) compliance and strong cyber posture across confidentiality, integrity, availability, authentication, and non‑repudiation
• Conduct ACAS vulnerability scans and STIG compliance assessments on standalone and networked systems.
• Execute SCAP scans to support automated STIG validation and compliance reporting.
• Apply operating system and application patches, perform software upgrades, and conduct regression testing to ensure system integrity.
• Provide day-to-day cybersecurity operations and maintenance support, including server, network, and policy enforcement activities.
• Deliver technical and analytical cybersecurity recommendations to engineering and program teams.
• Identify and report cybersecurity policy violations to the ISSM and program leadership.
• Track security baselines and participate in Configuration Control Board (CCB) meetings related to infrastructure and network changes.
• Develop and maintain cybersecurity documentation supporting system operations, maintenance, and issue resolution.
• Create, update, and manage POA&M entries based on ACAS, SCAP, and STIG artifacts to support continuous monitoring.
• Cybersecurity Assessment & Authorization (A&A / RMF)
• Support RMF Assessment & Authorization activities in an ISSO/ISSE capacity in accordance with Department of the Navy policies and instructions.
• Perform RMF Step 5 authorization support and RMF Step 6 continuous monitoring activities.
• Support efforts for ATO package development and validation as applicable.
• Conduct annual security reviews and annual security control testing.
• Manage POA&M tracking, vulnerability remediation, and risk mitigation activities.
• Plan and execute cybersecurity testing to assess and document security control effectiveness.
• Evaluate the quality and completeness of security control implementations against RMF requirements.
• Perform ongoing vulnerability and compliance scanning in support of continuous monitoring.
• Test & Evaluation (T&E) Support
• Support Developmental Test & Evaluation (DT&E), Operational Test & Evaluation (OT&E), penetration testing, and tabletop exercises.
• Assist with technical and management processes supporting operational verification, installation testing, and system readiness.
• Provide cybersecurity support to test events and evaluation activities across the system lifecycle.

• Minimum of five (5) years of full-time professional experience performing Risk Management Framework (RMF) activities.
• Active, current security clearance that is at least secret level.
• Demonstrated experience with:
• STIG assessments (manual and automated, including SCAP benchmarks)
• ACAS vulnerability scanning
• eMASS utilization and workflow execution
• POA&M development and management
• RMF Step 5 authorization activities in an ISSE capacity
• Education, Certification Requirements: Bachelor's Degree in Cybersecurity, Cyber Operations, Cyber Engineering, Information Systems, Information Technology, Computer Engineering, Electrical or Electronics Engineering, Software Engineering, Computer Science, Mathematics with a concentration in Computer Science, or a closely related discipline.
• Active IAM Level II (or higher) certification (CAP, Security
  
  X [formerly CASP], CISM, CISSP, GSLC, CCISO, or HCISPP)

$85,000/year-$90,000/year

Data Intelligence, LLC (DI) is a small business that provides Information Technology System Development (Agile, Dev Sec Ops , Cloud Platform support) Cybersecurity (RMF, Security Engineering, Cross Domain Solutions), Tactical Data Link Standards Development and Testing, and…