Job Description
Position Type: Full-Time Experience: 3+ Years
Clearance: Secret AERMOR is seeking subject matter expertise in obtaining Risk Management Framework authorizations, reauthorizations, maintaining POA&M, conducting continuous monitoring including updating system and eMASS records. Competence using eMASS and developing RMF documentation. Knowledge and experience must include system administration of Red Hat workstations and Windows 11 Pro, including patching and updating. Experience must include applying STIGs and conducting vulnerability scanning and analysis. Knowledge of vendor operating system updates and support timelines and processes is essential. An intermediate level knowledge of computer networking, TCP/IP and common network devices is highly desired.
This is not a remote position. Responsibilities Include: - Maintain currency on all published RMF documentation, procedures and processes including Standard Operating Procedures, SCA / NAO / DISA memorandums, publications, guidance and orders.
- Utilize appropriate Standard Operating Procedures to verify package accuracy and readiness for each phase of authorization, correct deficiencies and report results.
- Maintain and update all Risk Management Framework (RMF) artifacts. Conduct security reviews of systems annually within required time constraints including scheduling of required security testing.
- Conduct comprehensive RMF package reviews to ensure continued security control compliance based on current guidance and make recommendations for updates.
- Ensure traceability is maintained throughout the RMF artifacts such as diagram, asset lists, vulnerability scans and POA&M.
- Update the RMF Project Lead on status of assigned eMASS packages with respect to timelines, updated RMF guidance, end of life / end of support software, DADMS approval expirations, updated STIGs etc. impacting the systems.
- Draft Memorandums for Record (MFR) in support of configuration changes and manage the overall change process with respect to timelines, documentation and implementation.
- Plan, coordinate and conduct ACAS security scans on systems at customer sites, verify collected data meets all requirements.
Required Skills and Experience: - CompTIA Security+.
- 1 – 3 years’ experience creating artifacts and assembling RMF packages in eMASS.
- Risk Management Framework (RMF) training ideally DISA or USFF Provided
- Assured Compliance Assessment Solution (ACAS) Official Training
- Linux System Administration experience sufficient to install, configure and update NESSUS Security Center and NESSUS Scanner on Red Hat, obtain credentialed security scans and collect data for analysis.
Job Tags
Full time,