• Own the
day-to-day security authorization posture of assigned DoD information systems
• Work within a
well-resourced team with dedicated engineering, operations, and architecture
support
• Develop expertise
in modern RMF tooling including eMASS and eMASSer automation
• Directly support
mission continuity by managing ATO packages and continuous monitoring programs
• Grow into a
senior GRC role with clear advancement pathways
• Develop,
maintain, and update System Security Plans (SSPs) for assigned systems
• Manage POA&Ms
from identification through remediation and closure
• Compile and
submit Authorization to Operate (ATO) packages
• Conduct
continuous monitoring activities per established strategy
• Utilize eMASS for
GRC management and RMF workflow tracking
• Coordinate with
ISSEs and SecOps to validate control implementations
• Develop Security
Assessment Plans (SAPs) and support SAR coordination
• Draft supply
chain risk management plans
• Support the
Cybersecurity Architect with RMF strategic planning
Required:
• Active Secret or
TS clearance
• 3–5 years of
RMF/ATO experience within DoD or federal environments
• Hands-on
experience with eMASS
• Working knowledge
of NIST SP 800-53r5 and DoD RMF processes
• Demonstrated
ability to independently author SSPs and manage POA&Ms
Required Certification:
• DoD 8140.03M DCWF
Basic tier certification — CEH
Desired Certification:
• DoD 8140.03M DCWF
Intermediate tier certification — one of: CEH(P), RCCE Level 1, Cloud+, CPTE,
FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+
Required Education:
• DoD 8140 Interim
Education Options
Desired Education:
• Bachelor’s degree
in Computer Science, Cybersecurity, Data Science, Information Systems,
Information Technology, or Software Engineering
Desired:
• Experience with
eMASSer or similar RMF automation tooling
• Exposure to
cloud-hosted or hybrid system authorization boundaries
• Familiarity with
the DoD RMF Knowledge Service
Skills Required
- Active Secret or Top Secret (TS) clearance
- 3-5 years of RMF/ATO experience within DoD or federal environments
- Hands-on experience with eMASS
- Working knowledge of NIST SP 800-53r5 and DoD RMF processes
- Demonstrated ability to independently author System Security Plans (SSPs) and manage POA&Ms
- DoD 8140.03M DCWF Basic tier certification (CEH)
- DoD 8140 Interim Education Options
- DoD 8140.03M DCWF Intermediate tier certification (one of: CEH(P), RCCE Level 1, Cloud+, CPTE, FITSP-A, GCED, GCIH, GCSA, GICSP, GSEC, PenTest+, or Security+)
- Bachelor's degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering
- Experience with eMASSer or similar RMF automation tooling
- Exposure to cloud-hosted or hybrid system authorization boundaries
- Familiarity with the DoD RMF Knowledge Service
What We Do
CDIT, headquartered in Slidell, LA, has provided technical services for both commercial and Federal customers for the past 18 years. We deliver high-value services with our Agile integrated approach, consisting of Lean-Agile frameworks, process maturity, best practices combined with information security and quality management standards. This integrated approach is paired with the principles of accountability, collaboration, and delivery established our core CDIT execution model. This model allows us to successfully deliver and perform on small to large-scale programs remotely and on-site. CMMI III DEV | ISO 9001:2015 | ISO 27001:2015
