Job TitleDuties May Include:Apply RMF processes to support system Assessment & Authorization (A&A), including control selection, implementation, assessment, and continuous monitoringDevelop, review, and maintain security documentation such as SSPs, POA&Ms, SARs, and ATO artifacts in tools such as XACTA or eMASSConduct vulnerability assessments and compliance scans (e.g., ACAS) and track remediation of findings and IAVM requirementsImplement and validate security controls aligned with NIST 800-53, CNSSI 1253, and related DoD guidanceSupport system hardening, patching, and configuration management in compliance with STIGs for Linux, Windows, and network devicesMonitor systems for security events and support incident response and risk mitigation activitiesAssess security impacts of system changes and support configuration control boards (CCBs)Collaborate with system engineers, administrators, and DevSecOps teams to integrate security throughout the system lifecycleProvide cybersecurity risk input to program leadership, Authorizing Officials (AOs), and stakeholders