Senior Security RMF Engineer

Job Summary

To support the VA.gov Platform, the full-time Senior Security RMF Engineer will manage the assessment of compliance with security controls, perform risk assessments, and collaborate with engineering teams to translate security requirements into actionable tasks in a remote setting.

Key responsibilities

• Assess VA.gov Platform compliance with the 18 Critical Controls and identify gaps in implementation
• Perform security reviews, gap analyses, and risk assessments across infrastructure and applications
• Develop and maintain RMF and authorization artifacts, ensuring synchronization with technical changes

Required qualifications

• Associate's degree plus four years of relevant experience, or Bachelor's degree plus two years of relevant experience, or five years of relevant Cyber Security Engineer experience
• Strong experience with NIST Risk Management Framework (RMF) and NIST 800-53 security controls
• Experience supporting ATOs for complex information systems and performing security control assessments
• Ability to understand cloud infrastructure and modern software-development practices
• Experience working directly with technical engineering teams on vulnerability and control remediation