We're looking for a Security Engineer focused on designing and building scalable technical solutions. This senior role requires 9+ years of relevant experience.
About the role
Active TS/SCI SSBI clearance
B.S. Computer Science, Information Technology, or a related field
10+ years of RMF/Cybersecurity experience
Advanced experience leading RMF, Assessment and Authorization, and continuous-monitoring activities for multiple federal or DoD information systems.
Expert knowledge of federal, DoD, and Air Force cybersecurity policy and the ability to convert policy into practical, system-level implementation guidance.
Demonstrated experience developing and evaluating SSPs, RARs, POA&Ms, security-control evidence, authorization decision packages, and mission-impact analyses.
Hands-on proficiency with eMASS and ITIPS or equivalent federal authorization and portfolio-governance systems.
Ability to assess security controls, determine control effectiveness, document weaknesses and residual risk, and recommend risk-informed courses of action.
Experience briefing senior leaders and supporting Authorizing Officials, AODRs, system owners, program offices, governance forums, and technical teams.
Strong technical writing, analytical, quality-control, stakeholder-management, and version-control skills.
Ability to manage simultaneous authorization actions and recurring deliverables while meeting PWS deadlines and maintaining artifact currency.
Ability to work primarily at Ellsworth AFB during the PWS duty-hour window and support rare work at Wright-Patterson AFB or a contractor facility when required.
Active DoD 8140 certification
Lead comprehensive Risk Management Framework lifecycle support across the DAF FM portfolio, including security control selection, implementation, validation, authorization, and continuous monitoring.
Provide expert advisory support to the FM Authorizing Official, AODR, and program offices on the compliant application of federal, DoD, and Air Force cybersecurity policy.
Analyze cybersecurity statutes, regulations, directives, standards, policies, and guidance and translate them into actionable implementation requirements for FM systems.
Develop, manage, review, and sustain authorization artifacts for multiple systems, including System Security Plans, Risk Assessment Reports, Plans of Action and Milestones, control evidence, and related records in eMASS and ITIPS.
Conduct vulnerability assessments, perform technical and mission risk analysis, identify systemic issues, and design defensible mitigation strategies across the FM portfolio.