Cyber Security Specialist (Top Secret cleared)

The Work
We are seeking a Senior Cybersecurity Engineer with deep experience supporting the Risk Management Framework (RMF) and Authorization to Operate (ATO) lifecycle for federal information systems. This role focuses on STIG compliance vulnerability management POA&M tracking and incident response for highimpact systems operating in classified environments.

Key Responsibilities

• Provide end-to-end RMF and ATO support including development maintenance and submission of security authorization packages.

• Manage and maintain eMASS artifacts ensuring accuracy completeness and audit readiness.

• Conduct and oversee STIG compliance activities across operating systems databases and platforms; document findings and remediation actions.

• Identify track and manage Plans of Action and Milestones (POA&Ms) coordinating with technical teams to drive remediation to closure.

• Perform and review vulnerability assessments using tools such as Nessus and STIG scanning utilities; analyze results and recommend mitigation strategies.

• Support incident response activities including investigation reporting and coordination with security leadership and stakeholders.

• Develop and update RMF documentation such as SSPs SARs RARs and continuous monitoring artifacts.

• Collaborate with ISSOs ISSEs system owners developers and program leadership to ensure ongoing compliance with federal and DoD cybersecurity requirements.

• Support continuous monitoring activities and ATO renewals in accordance with NIST DoD and agency-specific guidance.

Required Qualifications

• 10 years of experience supporting RMF / ATO processes for federal information systems.

• Bachelors degree in Cybersecurity Information Assurance Computer Science or a related field.

• Active Top Secret / SCI clearance.

Preferred Qualifications

• Preference to candidates who has experience supporting DCSA or a federal agency.

• Relevant cybersecurity certifications (e.g. CISSP CISM CAP CEH or Security).

• Hands-on experience with eMASS including package creation and ongoing maintenance.

• Strong working knowledge of STIG compliance vulnerability scanning and remediation processes.

• Experience managing and reporting POA&Ms through resolution.

• Familiarity with Nessus and other vulnerability assessment and STIG scanning tools.

• Experience supporting or participating in incident response efforts within a classified or regulated environment.

• Solid understanding of NIST RMF and federal cybersecurity compliance requirements.

• Background working in classified cloud or hybrid environments.

• Experience with continuous monitoring and ATO sustainment activities.

• Familiarity with DISA STIGs ACAS or similar DoD-aligned security tools.

#icfcleared

#dcsa2026

Working at ICF

Pay Range - There are multiple factors that are considered in determining final pay for a position including but not limited to relevant work experience skills certifications and competencies that align to the specified role geographic location education and certifications as well as contract provisions regarding labor categories that are specific to the position.

The pay range for this position based on full-time employment is: