Responsible for supporting adherence to all aspects of a rigorous Risk Management Framework (RMF) compliance program as stipulated by NISPOM/DAAG, JSIG, ICD 503, STIGs and associated NIST publications.
Compensation
Full-Time Salary Range: $79365 - $134921
Responsibilities
Support adherence to RMF compliance program
Maintain Authority to Operate approvals
Enforce System Security Plans and POA&Ms
Assess and audit systems security controls
Collaborate with Information System Security Manager
Requirements
Nice to have: Working knowledge of system functions
Applies Systems Security Engineering methods, practices, and technologies to the architecture, design, development, evaluation, and integration of systems and networks to maintain system security.
Locations (2)
Rochester, New York, United States
Columbia, Maryland, United States
Compensation
the salary range for this role in New York is $92,500 - $171,500. The salary range for this role in Washington is $106,500 - $197,500.
Responsibilities
Certification of Cryptographic High Assurance Devices
Experience with High Assurance products, IASRD and SERD requirements
Configuration and use of cyber defense and vulnerability assessment tools such as ACAS and SCC
Assess security and privacy controls in embedded systems using NIST 800-53
Utilize Risk Management Framework (RMF) accreditation and authorization (A&A) processes
Lead Information Security Systems Engineer responsible for the architecture, design, and integration of secure systems and networks using NIST and Risk Management Framework (RMF).
Compensation
In compliance with pay transparency requirements, the salary range for this role is $125,000 - $232,000.
Responsibilities
Lead assessment activities for security and privacy controls in embedded systems using NIST 800-53
Lead programs through the Risk Management Framework (RMF) accreditation and authorization (A&A) processes
Support security engineering activities, including basis of estimate development, requirements development, design, test, configuration management and maintenance
Assist program security in the development of policies and procedures for emerging security technologies
Support the evaluation, qualification, testing and delivery of security architecture improvement