Location: 100% Remote
Years' Experience: 9 years
Education: Bachelor's Degree in Cybersecurity or IT related field
Work Authorization: Must be able to show that applicant is legally permitted to work in the United States
Clearance: Applicants must be able to meet the requirements to obtain a Secret security clearance. NOTE: United States Citizenship is required to be eligible to obtain a Secret security clearance.
Key Skills:

• Navy RMF package and Assessment and Authorization (A&A) experience using eMASS
• Understanding of CI/CD pipeline and enterprise DevSecOps implementation is preferred
• Experience with Amazon Web Services a bonus
• Ability to obtain a CompTIA Security certification

Responsibilities

• Collaborate with customers and internal engineering teams to lead required RMF process/steps to assess and authorize a system obtaining and maintaining a full ATO (Authority to operate).
• Assist the customer with authorizing assessment and authorization (A&A) documentation.
• Support writing and reviewing of Risk Management Framework (RMF) documentation packages to support risk assessments.
• Strong understanding of Navy RMF procedures for ATOs, MFRs, and Use Cases.
• Design and execute the security testing plan of all requirements and analysis required to complete a RMF package document for submittal and approval.
• Knowledge of web application security, mobile application security, and DoD RMF processes, procedures, governance.
• Knowledge of Cybersecurity, Network, Systems, and Software Engineering best practices
• Experience with DoD eMASS, STIGs, and SRGs.
• Be proficient with vulnerability scanning tools and frameworks to evaluate the security posture of a system.
• Assist the customer in preparing training conferences, exercises, and video teleconferences to meet annual IA training objectives.
• Have technical understanding of cloud technologies (i.e., AWS and Salesforce) and their implementation within the customer's network environments.

Qualifications

• Must be able to obtain a Secret security clearance
• Must have a bachelor degree
• 9 years of cybersecurity professional experience
• Experience with requirements analysis, architect, design, and documentation development of cybersecurity and information security solutions
• Experience leading RMF for IATT/ATO activities involving custom on-prem and cloud solutions is a bonus.
• Experience performing vulnerability risk analysis on the deficiencies found during RMF control testing.
• Experience with cybersecurity tools and scanners used to evaluate the security posture of the system/enclave (preferred tool experience: tenable.io, Nessus, GitLab, Docker, Palo Alto Prisma Cloud, Fortify, AWS Inspector, BurpSuite, ZAP)
• Experience with eMASS, MCCAST, Jira, Agile, Accelerator, Bitbucket, and/or Flosum a bonus
• Linux and Salesforce administration experience a bonus
• Experience as a Navy Qualified Validator (NQV) Level III validator is a bonus.

About Sparibis
Sparibis LLC is a professional solution firm that Clients rely on to access the best talent to drive their business success.
Sparibis is an equal opportunity employer that values diversity at all levels. All individuals, regardless of personal characteristics, are encouraged to apply.