Execute Risk Management Framework (RMF) activities supporting system authorization, continuous monitoring, and Continuous Authority to Operate (cATO).

Maintain RMF documentation including SSPs, POA&Ms, SARs, hardware/software inventories, and security artifacts.

Support cybersecurity assessments conducted by Security Control Assessors, penetration testing teams, and Authorizing Officials.

Monitor system cybersecurity posture and coordinate remediation of vulnerabilities and assessment findings.

Perform vulnerability management, STIG implementation, configuration compliance validation, and security control assessments.

Support implementation of Zero Trust security principles, cloud security controls, Kubernetes/OpenShift security, container hardening, and DevSecOps security practices.

Collaborate with Government leadership, ISSMs, ISSEs, software developers, cloud engineers, Cyber Operations Teams (COT), and Cyber Penetration Teams (CPT) to integrate cybersecurity into Agile software development.

Maintain continuous monitoring documentation, audit evidence, and cybersecurity reporting.

Evaluate cybersecurity findings and recommend corrective actions to improve system security posture.

Assist with annual cybersecurity inspections, assessments, audits, and operational readiness activities.

Prepare technical documentation, executive reports, and cybersecurity metrics supporting Government decision-making.

Support cybersecurity operations across Unclassified, Secret, and SCI environments

Cybersecurity Engineer (ISSO)

Responsibilities

Company

Anavationllc

More roles at Anavationllc