Note: The job is a remote job and is open to candidates in USA. LeoRose Consulting is seeking a Cyber Security Engineer to support system owners with Authority to Operate (ATO) packages and Risk Management Framework processes. The role involves developing and reviewing authorization artifacts, mapping them to NIST 800-53 controls, managing POA&Ms, and guiding teams through eMASS workflows in a cloud security environment.
Responsibilities
- Work with system owners to create their ATO packages
- Review and create artifacts that comply with the VA’s authorization requirements, and compliance and map those artifacts to the appropriate NIST 800-53 controls such as Assessment Procedures (AP) testing and evaluation
- Review and help to write control implementation statements
- Work with system teams to review, update, and create their POAMs and help system teams to navigate the Enterprise Mission Assurance Support System (eMASS) GRC tool
- Provide guidance and support to system teams throughout every step of the RMF process and eMASS workflow
- Supporting system Authority to Operate (ATO) processes, Artifact Development processes, Security Control implementation details, and Plan Of Action & Milestones (POA&M)
- Leading and managing cyber teams
- Client management and engagement
- Facilitate meetings
- Analyze authorization documents and associated artifacts against authorization requirements to identify gaps, establish a schedule to address outstanding authorization requirements, coordinate directly with system team stakeholders, and implement work activities in accordance with established Standard Operating Procedures (SOPs)
- Work independently and in teams
- Work core business hours of 8 AM to 5 PM (EST), Monday through Friday
Skills
- Must have experience with eMASS
- Experience with supporting system Authority to Operate (ATO) processes, Artifact Development processes, Security Control implementation details, and Plan Of Action & Milestones (POA&M)
- Experience with leading and managing cyber teams
- Experience with client management and engagement
- Knowledge of the Risk Management Framework (RMF) and NIST 800-53 Rev. 4
- Ability to facilitate meetings
- Ability to analyze authorization documents and associated artifacts against authorization requirements to identify gaps, establish a schedule to address outstanding authorization requirements, coordinate directly with system team stakeholders, and implement work activities in accordance with established Standard Operating Procedures (SOPs)
- Ability to work independently and in teams
- Ability to work core business hours of 8 AM to 5 PM (EST), Monday through Friday
- Full-time W2 position, 100% remote, must be based in the U.S. and a U.S. Citizen
- Experience with ATO requirements, artifact orchestration, and review experience
- Experience with POAM Lifecycle management
- Experience with the Security Technical Implementation Guide (STIG) Viewer
- Experience with federal IT and Cloud security policies
- Knowledge of the system security scanner Tenable and or Nessus
- Knowledge of information technology concepts, cloud computing methodologies (PAAS, SAAS, IAAS), FedRAMP/AWS GovCloud, network/server topologies, and configurations
- Ability to articulate authorization requirements to varying degrees of staff/leadership
- CISSP or CISA or CAP or CISM or CRISC certification
Benefits
- Full benefits including medical, dental, vision, STD, LTD, Life, PTO, and a 401k matching program.
- 100% remote
Company Overview