RMF and Cybersecurity Lead

Amyx is seeking to hire a RMF and Cybersecurity Lead to join our Defense client in O'Fallon, IL.

• This position will supports RMF compliance, cybersecurity operations, and continuous monitoring.
• Primary Responsibilities will include: Develops and maintains RMF artifacts (ATO/ATC, POA&Ms). Supports vulnerability management and security audits. Provides cybersecurity reporting and metrics.
• Develops and maintains RMF artifacts (ATO/ATC, POA&Ms).
• Supports vulnerability management and security audits.
• Provides cybersecurity reporting and metrics.
• Must be experience in RMF compliance & documentation: develop/maintain documentation to obtain ATO/ATC; identify evidence/artifacts for A&A packages; manage RMF artifacts (risk acceptance memos, POA&Ms, etc.); update security documentation in eMASS or Government-selected tools; provide A&A metrics.
• Continuous monitoring & vulnerability management: upload code/security scans/checklists; document AP/CCI mappings; track POA&Ms audit POA&M items; validate privileged user accounts as needed.
• Compliance auditing & PPSM: support PPSM registry activities; ensure declared PPSMs follow applicable instructions; support internal/external security audits (including financial/privacy audits).
• Cybersecurity operations: log analysis; support control audits/assessments; assess security control effectiveness; develop metrics and security posture reporting; support change management review for security impacts.
• Incident reporting awareness: align reporting actions with DFARS 252.204
• Must have the ability to communicate accurate information

• Secret Clearance.
• Must have one CE cert/certificate aligned to OS/tools/devices supported (categories include OS, network support/defense, cloud/virtualization, applications, etc.