plans-of-action-and-milestones-poa-m jobs in San Diego

The Security Control Assessor – Representative will perform risk-based reviews and evaluations of system security plans (SSPs) for classified systems under the Risk Management Framework (RMF), making authorization recommendations. The role requires expert knowledge of NIST 800-53 security controls, DoD/DCSA policies, and the NISP eMASS platform to assess compliance artifacts, document findings, and provide defensible security authorization decisions.…See more The candidate must hold an IAT Level II certification (Security+, CCNA Security, CSA+, GICSP, GSEC, or SSCP) and an active Secret clearance to evaluate classified system packages against government technical standards.

The ISSE will own an assigned eMASS package and drive interim authorization processes for a Navy client, ensuring RMF compliance and DoD cybersecurity guidance adherence. Key responsibilities include conducting STIG assessments, coordinating remediation activities, developing and maintaining POA&Ms, and supporting Microsoft 365 DDIL security testing.…See more The role requires a Bachelor's degree in Computer Science or related field, 3–5 years of RMF/cybersecurity accreditation experience, and a current DoD 8140 Level II certification (CISSP, CISM, CASP+, or CGRC). An active SECRET clearance is mandatory.

The Cybersecurity Engineer III will support Risk Management Framework (RMF) activities, Assessment & Authorization (A&A) processes, and continuous monitoring for DoD accredited systems. Responsibilities include developing and maintaining security documentation (SSPs, SAPs, SARs, POA&Ms), performing vulnerability assessments, managing eMASS tasking, and conducting security control validation and testing.…See more The role requires 10+ years in cybersecurity, RMF compliance, or incident response; expertise with eMASS, DISA STIGs, and vulnerability assessment tools; and an active Secret clearance with DoD 8570/8140 IAT Level III certification (CASP+, CCNP Security, CISA, CISSP, GCED, or GCIH).

The RMF Engineer will support DoD Assessment & Authorization activities by developing, maintaining, and managing Risk Management Framework documentation and artifacts throughout the system lifecycle. Key responsibilities include system categorization, creating and updating security plans and control evidence, managing RMF packages in eMASS, assessing security controls, and coordinating with engineering and cybersecurity teams on remediation.…See more The role requires 3+ years of hands-on DoD RMF experience, deep knowledge of NIST SP 800-53 and RMF processes, and proficiency with authorization management tools. This hybrid position is mostly remote and demands strong technical documentation and stakeholder communication skills.