{"id":2550306,"url":"https://alion.io/job/dark-wolf-solutions-cybersecurity-rmf-specialist","title":"Cybersecurity RMF Specialist","company":{"id":716229,"name":"Dark Wolf Solutions","domain":"darkwolf.io","url":"https://alion.io/company/darkwolf","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":94,"open_postings":12,"ghost_share":0,"stale_share":0.25,"repost_share":0,"time_to_fill_p50_days":55,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Herndon, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":120000,"max":150000,"currency":"USD","period":"year","gross":null,"usd_annual":150000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Confluence","optional":false},{"name":"Docker","optional":false},{"name":"Docker Compose","optional":false},{"name":"GitHub","optional":false},{"name":"GitLab","optional":false},{"name":"IAM","optional":false},{"name":"Jira","optional":false},{"name":"Kubernetes","optional":false},{"name":"NIST 800-53","optional":false}],"status":"live","first_seen_at":"2026-10-14T15:04:57Z","employer_posted_date":"2026-10-14","last_verified_at":"2026-10-15T05:06:04Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Dark Wolf is seeking a Cybersecurity RMF Specialist to serve as the primary regulatory and technical authority for the authorization of mission-critical software in DoD Impact Level 5 (IL5) and Impact Level 6 (IL6) enclaves. This role is responsible for the independent management of the end-to-end Risk Management Framework (RMF) process, including the development of a comprehensive Body of Evidence (BoE) for Continuous Authorization to Operate (cATO). The successful candidate will act as the principal liaison between Platform Engineers, Developers, and Government stakeholders - including Security Control Assessors (SCA) and Authorizing Officials (AO) - to ensure the rigorous application of cybersecurity principles within a DoD operational ecosystem. This position requires a candidate capable of navigating complex cloud security requirements independently to achieve and maintain software readiness for national security systems.\nKey Responsibilities:\nLeading the end-to-end RMF process specifically for DoD IL5 and IL6 environments, managing eMASS security controls, Artifacts, POA&Ms, and authorization documentation to maintain system compliance and security posture\nManaging Continuous Monitoring (ConMon) activities and security artifacts, including maintaining, reviewing, validating, and submitting STIG checklists, architecture/network diagrams, HW/SW inventories, PPSM documentation, SBOMs, container image inventories, and supporting evidence to the DHA Cybersecurity Team\nCoordinating ACAS/SAST Vulnerability scans, IAVA compliance, and remediation efforts with DHA Cybersecurity Team and Platform Engineers, tracking vulnerabilities and compliance findings through remediation and closure\nTranslating DISA STIG, SRG, and NIST 800-53 requirements into actionable technical requirements, partnering with Platform/Engineers to implement security controls through Infrastructure as Code (IaC) and performing security control assessments\nServing as the primary cybersecurity liaison for government stakeholders, supporting CCB/change requests and briefing DHA cybersecurity teams and senior leadership on system security posture, compliance status, risks, remediation efforts, and the path to continued authorization\nRequired Qualifications:\n5+ years of relevant Cybersecurity experience, with a focus on DoD RMF and Impact Level 5/6 authorizations\nDirect experience with DoD Cloud Service Providers (e.g. AWS Govcloud) ecosystems\nProven ability to independently lead coordination with government Security Control Assessors (SCA) and mission partners\nExperience with eMASS and the Enterprise Mission Assurance Support Service for managing DoD system records\nKnowledge of security scanning tools (e.g., Static Analysis, Dynamic Analysis, etc.)\nExperience with using Atlassian tools such as Jira and Confluence\nConfidence in providing briefings, presentations, and in conducting/guiding meetings with senior leadership and stakeholders\nDoD 8140/8570 IAM Level III Certification (e.g., CISSP, CISM, or GSLC)\nUS Citizenship and an active DoD Secret security clearance\nB.A. or B.S. Information Security, Computer Science or related discipline\nDesired Qualifications:\nExperience with the DoD Architecture Framework (DoDAF)\nExperience with Cloud Computing Security Requirements Guide (CC SRG)\nExperience with DoD DevSecOps Fundamentals Playbook\nExperience with DevSecOps Platforms such as GitLab or GitHub\nUnderstanding of container based application development tools (e.g., Docker, Docker Compose, Kubernetes)\nUnderstanding of \"Continuous ATO\" (cATO) concepts and the integration of automated security testing into DevSecOps pipelines\nThis role requires a hybrid presence in Northern Virginia. The compensation for this role is estimated to be between $120,000-$150,000, commensurate on experience. \nWe are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.\nIn compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.\nWe are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.","description_format":"text","description_chars":4266,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Managed Security","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-14T17:48:05Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":55,"reasons":["conf:0","velocity","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":{"stated_usd_annual":150000,"is_top_pay":false},"html_url":"https://alion.io/job/dark-wolf-solutions-cybersecurity-rmf-specialist","json_url":"https://alion.io/job/dark-wolf-solutions-cybersecurity-rmf-specialist.json","meta":{"generated_at":"2026-10-15T05:57:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8928,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":716229},"rest":"https://alion.io/mcp/rest/get_company?id=716229"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdark-wolf-solutions-cybersecurity-rmf-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdark-wolf-solutions-cybersecurity-rmf-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdark-wolf-solutions-cybersecurity-rmf-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dark-wolf-solutions-cybersecurity-rmf-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdark-wolf-solutions-cybersecurity-rmf-specialist"}]}