Key skills
AWSCloudServiceNowSplunkDatadogCI/CDNetwork SecurityCloud Security
About this role
Role Overview
- Develop and maintain RMF documentation (SSP, POA&M, SAR inputs)
- Map and implement security controls across system layers
- Coordinate with VA security stakeholders
- Support vulnerability scanning and remediation
- Enable continuous monitoring and compliance
Requirements
- RMF Framework: NIST 800-53, control families, tailoring
- ATO Process: SSP development, POA&M management, authorization workflows
- ServiceNow GRC (or similar): Documentation and tracking
- Cloud Security: AWS security controls, shared responsibility model
- Identity & Access Management: RBAC, least privilege, federation concepts
- Encryption: TLS, data-at-rest encryption, key management (KMS)
- Vulnerability Management: Scanning tools, remediation workflows
- Logging & Monitoring: SIEM integration (Splunk, Datadog concepts)
- Network Security: Segmentation, ingress/egress control, TIC awareness
- Compliance Standards: HIPAA awareness, FISMA/FEDRAMP basics
- DevSecOps Integration: Security in CI/CD pipelines
- Risk Assessment: Identifying and documenting system risks and mitigations
Tech Stack
- AWS
- Cloud
- ServiceNow
- Splunk
Benefits
- Health Care Plan (Medical, Dental & Vision)
- Retirement Plan (401k)
- Life Insurance (Basic, Voluntary & AD&D)
- Paid Time Off
- Family Leave (Maternity, Paternity)
- Short Term & Long-Term Disability
- Training & Development