Cybersecurity/RMF Specialist – Clearance Level | Remote
Cybersecurity/RMF Specialist – Clearance Level | Remote
Cambridge International Systems, Inc.
Join a dynamic global team united by shared values: commitment, integrity, and perseverance. At Cambridge, you’ll work alongside top talent worldwide, tackling some of today’s most complex and critical challenges in defense and security.
We are currently seeking a Cybersecurity/RMF Specialist to support Cambridge International Systems, Inc. This is a full-time, CONUS position requiring an active DoD Secret clearance.
The base salary range for this role is $100,000 to $106,000 annually, depending on geographic location and experience. The final offer will be based on relevant experience, skills, internal equity, and market data.
What You’ll Do
As a Cybersecurity/RMF Specialist, you will play a critical role in supporting system security throughout the development lifecycle in alignment with DoD/DoN RMF guidance. This role focuses heavily on RMF implementation (Stage 4) and overall system compliance, risk management, and authorization efforts.
You will:
- Design, implement, and maintain system security controls across the RMF lifecycle, with emphasis on Stage 4 – Implementation
- Assess management, operational, and technical controls to evaluate compliance and risk posture
- Develop and maintain RMF documentation (SSPs, POA&Ms, SARs, SOPs, contingency plans, privacy impact assessments)
- Manage updates in eMASS and maintain system records in DADMS
- Perform STIG validations, vulnerability assessments, and annual RMF reviews
- Support audits, configuration management, and Configuration Control Board (CCB) activities
- Maintain inventories of authorized software, ports, protocols, and system components
- Provide cybersecurity reports, risk recommendations, and ATO strategy guidance to stakeholders
- Lead or support contingency planning, disaster recovery reviews, and tabletop exercises
- Education & Experience:
- Bachelors preferred but not required
- 5 to 7 years of experience in cybersecurity with focus on RMF, system security engineering, or A&A efforts
- Technical Expertise:
- Strong experience in experience across the 7 RMF lifecycle stages, especially Stage 4 (Implementation)
- Hands on experience with RMF documentation and DoD /DoN accreditation processes
- Familiarity with eMASS, DADMS, STIGs, GIAP/SNAP, and DoDI 8510 series
- Working knowledge of NIST SP 800-series and DoD cybersecurity policies
- Certifications:
- At least one of the following certifications is required: CISSP (Certified Information Systems Security Professional) CGRC (ISC2 Certified in Governance, Risk, and Compliance – formerly CAP)SecurityX (Formally CASP CE)
- Must have a current and active DoD Secret security clearance.
- Proficient with modern IT tools and infrastructure technologies
- Some overnight stays possible.
- Must have an active passport to support OCONUS travel and/or living requirements.
- Compliance with vaccination and medical requirements for TDY/OCONUS roles as per Vaccine Recommendations by AOR | Health.mil.
- Primarily an office-based role in remote location
- Standard desk/computer work with flexibility for walking and movement on site.
- Must be able to work in an office environment, sitting at a desk, looking at a computer for most of the workday.
- Work is physically comfortable; the employee has discretion about sitting, walking, standing, etc.
- May be required to travel short distances to offices/conference rooms and buildings on site.
- Employment is contingent upon successful background investigation
- Alcohol and Drug screening may be required for federal contract compliance
- Medical, dental, vision, life, accident, and critical illness insurance
- 401(k) immediate vesting and match
- Paid time off and company holidays
- Generous tuition & training support
- Relocation assistance
- Sign-on and performance-based bonuses
- Employee referral program
- Access to Tickets at Work, EAP, wellness initiatives, and more