Cybersecurity / RMF Lead

ElectrosoftFort Belvoir, VAJob.bopublished 10/26/2026
Must-have:CloudAISecurityLead

Your tasks

Position Summary Leads cybersecurity governance, RMF assessment and authorization, continuous authorization, control evidence, vulnerability risk management, and security integration across architecture, development, cloud, testing, release, and operations.

  • Lead the RMF and assessment-and-authorization strategy for PIEE systems and services.
  • Plan and coordinate security-control implementation, assessment, evidence, authorization packages, continuous monitoring, and POA&M management.
  • Maintain visibility into authorization status, material vulnerabilities, control deficiencies, remediation priorities, and residual risk.
  • Integrate cybersecurity requirements into architecture, development, DevSecOps pipelines, cloud environments, releases, and operational procedures.
  • Coordinate cybersecurity engineers, application vulnerability analysts, system stakeholders, assessors, Authorizing Official representatives, and delivery teams.
  • Ensure DISA STIGs, NIST controls, secure configuration, vulnerability findings, and remediation evidence are addressed and traceable.
  • Provide executive briefings, risk recommendations, metrics, and escalation of issues that could affect authorization or mission operations.

Requirements

Required Qualifications

  • At least five years of RMF/NIST assessment-and-authorization experience.
  • DoD cybersecurity experience, including security-control assessment and authorization reviews for large or complex organizations.
  • Knowledge of emerging technologies and cloud security implications.
  • Active DoD Secret clearance and IT-II / Tier 3 eligibility, as required.

Preferred Qualifications

  • Direct DLA and/or PIEE RMF, cATO, or cybersecurity leadership experience.
  • Expertise with eMASS, NIST SP 800-53, DISA STIGs, POA&Ms, cloud authorization, software assurance, and continuous monitoring.
  • CISSP, CAP/CGRC, CCSP, or comparable advanced cybersecurity certification.
  • Experience integrating RMF evidence and security controls into Agile and DevSecOps delivery.