Job Description:
• Support an Army program modernizing platform infrastructure through secure, scalable, cloud-enabled systems
• Serve as a cybersecurity advisor to the Information System Security Manager, System Owners, and technical engineering teams
• Maintain the system security authorization package in eMASS
• Prepare and maintain RMF artifacts, including the System Security Plan, Security Assessment Report, Continuous Monitoring Strategy, and supporting control evidence
• Curate and validate evidence for NIST SP 800-53 Revision 4 to Revision 5 transition and ongoing security control implementation
• Create, track, and update POA&Ms in eMASS and internal ticketing workflows
• Work with System Owners, Cloud Architects, System Engineers, and System Administrators to define remediation timelines, risk mitigation statements, and resource needs
• Review noncompliance closures and remediation evidence before ISSM and Authorizing Official approval
• Assess the technical and operational impact of directed cybersecurity tasks on cARMY AWS architecture, workloads, and cloud boundaries
• Conduct and review DISA STIGs and Security Requirements Guides using STIG Viewer and automated compliance tools
• Integrate vulnerability analysis, secure configuration validation, and DevSecOps activities into GitLab CI/CD and Agile workflows
• Support continuous monitoring and vulnerability scanning through ACAS and related tools
• Maintain cybersecurity dashboards and track POA&M aging, vulnerability trends, operational security tickets, incident responses, and change approvals
Requirements:
• Active Secret security clearance
• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field
• 5 or more years of experience in cybersecurity engineering, information assurance, RMF, or secure systems operations
• Active DoDI 8140 qualification
• Strong understanding of DoD cloud security, including AWS GovCloud, Azure IL5 or IL6, Zero Trust, and hybrid architectures
• Experience developing or maintaining RMF authorization artifacts and managing POA&Ms in eMASS or a comparable authorization workflow
• Practical experience applying NIST SP 800-53 controls, DoD STIGs, and security assessment requirements during system development or sustainment
• Experience with cloud security operations, vulnerability management, or security monitoring in AWS or another cloud environment
• Familiarity with Agile development, DevSecOps principles, and secure system lifecycle planning
• Clear communication skills and experience working with technical and program stakeholders to resolve findings and meet deadlines
• Experience supporting Army or DoD programs (preferred)
• Hands-on experience with AWS Security Hub, CloudWatch, CloudTrail, EvaluateSTIG, ACAS, STIG Viewer, Power BI, ServiceNow, or GitLab CI/CD (preferred)
• Experience with containerized workloads, cloud-native services, Linux, databases, web servers, or other enterprise system baselines (preferred)
• Familiarity with SAFe or another Agile framework and incremental delivery cycles (preferred)
• Must be a U.S. citizen or eligible for a U.S. Government security clearance
Benefits:
Apply To This Job