Lead RMF execution, implement and validate NIST SP 800‑53 security controls, maintain continuous monitoring, perform vulnerability assessments, manage POA&Ms, collaborate with clients, provide guidance and mentorship to cybersecurity team members.
Compensation
The projected compensation range for this position is $86,800.00 to $198,000.00 (annualized USD).
Responsibilities
Lead RMF execution, including security control attribution, documentation, assessment, and authorization.
Implement and validate NIST SP 800‑53 security controls across enterprise systems.
Maintain continuous monitoring activities for system compliance and risk visibility.
Perform vulnerability assessments and risk analysis using DoW security tools such as ACAS, VRAM, and eMASS.
Apply and verify DoW Security Technical Implementation Guidelines (STIGs) and Security Readiness Guidelines (SRGs) across software, database, and network environments.
Lead RMF execution, implement and validate NIST SP 800‑53 security controls, maintain continuous monitoring, perform vulnerability assessments, manage POA&Ms, collaborate with clients, and mentor cybersecurity team members.
Compensation
The projected compensation range for this position is $86,800.00 to $198,000.00 (annualized USD).
Responsibilities
Lead RMF execution, including security control attribution, documentation, assessment, and authorization.
Implement and validate NIST SP 800‑53 security controls across enterprise systems.
Maintain continuous monitoring activities for system compliance and risk visibility.
Perform vulnerability assessments and risk analysis using DoW security tools such as ACAS, VRAM, and eMASS.
Apply and verify DoW Security Technical Implementation Guidelines (STIGs) and Security Readiness Guidelines (SRGs) across software, database, and network environments.
Requirements
HS diploma or GED
Security+ Certification
DoW 8140 Certification such as CISM, CISSP, or SecurityX Certification
Nice to have: Information Systems Security Officer (ISSO)
Nice to have: Information Systems Security Manager (ISSM)
Lead vulnerability analysis, patch management, security compliance, and remediation efforts across thousands of endpoints operating in highly secure environments including NIPRNet, SIPRNet, and JWICS.
Compensation
Annual Salary: $100,000–$130,000, depending on experience and qualifications.
Responsibilities
Analyze ACAS/Nessus scan results to identify, assess, and prioritize security vulnerabilities across enterprise systems.
Develop and coordinate remediation plans for CAT I, II, and III vulnerabilities, ensuring compliance with DoD requirements and established deadlines.
Engineer, test, and deploy operating system and third-party security patches using MECM/SCCM and Microsoft Intune.
Evaluate systems against DISA STIGs using STIG Viewer, SCAP Compliance Checker, and other security assessment tools.
Maintain Plans of Action and Milestones (POA&Ms) in eMASS, documenting security risks, mitigation strategies, and remediation progress.
Information Systems Security Manager (ISSM) + Privacy to strengthen our cybersecurity and authorization function for a defense software platform and its customer systems.
Locations (5)
Washington DC, United States
Maryland, United States
Virginia, United States
Denver, Colorado, United States
Colorado Springs, Colorado, United States
Compensation
The base salary for this position will fall between $170,000 - $180,000. Your ultimate compensation will be determined by professional background, technical proficiency, seniority, and regional cost factors. Furthermore, this opportunity includes potential eligibility for equity awards and discretionary bonuses, rounding out a comprehensive total rewards offering.
The base salary for this position will fall between $200,000-$210,000. Your ultimate compensation will be determined by professional background, technical proficiency, seniority, and regional cost factors. Furthermore, this opportunity includes potential eligibility for equity awards and discretionary bonuses, rounding out a comprehensive total rewards offering.
Lead hands‑on security practitioner for a large‑scale Army Command & Control program, managing compliance, vulnerability remediation, and RMF activities on a cloud‑native platform.
Compensation
$147,000—$196,000 USD
Responsibilities
Track and coordinate CVE remediation across program environments
Focuses on Risk Management Framework (RMF) authorizations, reauthorizations, eMASS maintenance, and system administration of Red Hat and Windows 11 environments.
Compensation
Salary Range: $65,000-$80,000/yr
Responsibilities
Maintain currency on all published RMF documentation, procedures and processes including Standard Operating Procedures, SCA / NAO / DISA memorandums, publications, guidance and orders.
Utilize appropriate Standard Operating Procedures to verify package accuracy and readiness for each phase of authorization, correct deficiencies and report results.
Maintain and update all Risk Management Framework (RMF) artifacts.
Conduct security reviews of systems annually within required time constraints including scheduling of required security testing.
Conduct comprehensive RMF package reviews to ensure continued security control compliance based on current guidance and make recommendations for updates.
Requirements
Nice to have: RMF training (DISA or USFF Provided)
Nice to have: Assured Compliance Assessment Solution (ACAS) Official Training
The Senior Systems Security Engineer / Information System Security Manager (ISSM) is a dual-mode technical SME and program security lead responsible for the end-to-end cybersecurity posture, compliance governance, and system accreditation of information systems within a complex defense program environment.
Responsibilities
Lead the design and implementation of security infrastructure
Manage complex security projects
Provide strategic direction for security practices
Mentor junior engineers
Execute and oversee vulnerability management, security monitoring, configuration hardening, and incident response
Lead the accreditation portfolio for government and defense programs, making authorization decisions, managing RMF and CMMC processes, and coordinating with ISSM, engineering teams, and third‑party assessors.
Own authorization status, risk posture, privacy compliance, and continuous monitoring health across an assigned system portfolio.
Orchestrate concurrent RMF workflows in eMASS and other GRC tools (Xacta, RegScale, CSAM) from categorization through continuous monitoring.
Direct and mentor ISSOs supporting the portfolio, assign work, review authorization packages for quality, and coach on security and privacy requirements.
Govern privacy authorization across all systems, authoring PTAs, PIAs, SORN determinations, and implementing NIST 800-53 Rev 5 privacy controls and CNSSI 1253 overlays.
Synchronize PII and CUI data flows with ISSEs and Solutions Architects to ensure accurate identification and documentation in authorization packages and system designs.
Architect identity and access management designs covering federation, MFA, RBAC/ABAC, privileged access, and DoD PKI/CAC authentication across AWS, Azure, and GCP.
Build and maintain authorization boundary diagrams, network architecture diagrams, and data-flow diagrams showing components, trust boundaries, ports, protocols, and movement of CUI and sensitive data.
Translate engineering and architecture decisions into RMF artifacts including SSP architecture sections, AC/IA/SC/AU control narratives, PPSM registrations, and significant change impact analyses.
Evaluate proposed designs and new services against NIST 800-53, DISA Cloud Computing SRG, STIGs, and FedRAMP requirements and recommend compliant alternatives.
Govern security and authorization impact of architecture changes, customer integrations, and new services, advising ISSMs and ISSOs on significance and re-authorization requirements.
Compensation at Applied Intuition for eligible roles includes base salary, equity, and benefits. Base salary is a single component of the total compensation package, which may also include equity in the form of options and/or restricted stock units, comprehensive health, dental, vision, life and disability insurance coverage, 401k retirement benefits with employer match, learning and wellness stipends, and paid time off. Note that benefits are subject to change and may vary based on jurisdiction of employment. Applied Intuition pay ranges reflect the minimum and maximum intended target base salary for new hire salaries for the position. The actual base salary offered to a successful candidate will additionally be influenced by a variety of factors including experience, credentials & certifications, educational attainment, skill level requirements, interview performance, and the level and scope of the position.
Responsibilities
Own the accreditation portfolio across government programs
Make and own authorization decisions, including approach, scope, sequencing, and risk recommendations
Bring a clear plan to government sponsors and authorizing officials
Serve as ISSM of record for cloud and program authorizations under RMF
Maintain software approvals and authorizations on partner and customer platforms
Requirements
Bachelor's degree in Cyber Security, Information Systems, Computer Science, or a related field
Nice to have: authorizing classified cloud environments
Nice to have: ISSM on maritime, uncrewed, or autonomy programs
Nice to have: FedRAMP 20x pilot participation
Nice to have: building an authorization program from scratch
Cybersecurity Compliance and Risk ManagerNewBooz Allen Hamilton · Tampa, US
Vulnerability Management Engineering LeadNewG2IT · Quantico, US
Information Systems Security ManagerNewSecond Front Systems · Washington DC, US+4 more
Senior Information Systems Security Officer, NGC2NewAnduril Industries · Costa Mesa, US
Security Control Assessor, JrNewAGE Solutions · Remote, US+2 more
System Administrator Support TechnicianNewAERMOR LLC · Virginia Beach, US
Security Engineering Accreditation Lead, DefenseNewApplied Intuition · Washington, US+11 more