ZipRecruiter

Log In

2

Remote Rmf Jobs in Reston, VA (NOW HIRING)

TestPros

Senior AI Test Engineer (Remote)

Sterling, VA · On-site +1

$50 - $80/hr

OWASP AI Testing Guide, NIST AI Risk Management Framework (RMF) Location: Remote, with occasional travel to customer sites or TestPros labs in Sterling, VA This role evaluates AI systems and software ...

TestPros

Senior AI Test Engineer (Remote)

Sterling, VA · Remote

OWASP AI Testing Guide, NIST AI Risk Management Framework (RMF) Location: Remote, with occasional travel to customer sites or TestPros labs in Sterling, VA This role evaluates AI systems and software ...

ManTech

Enterprise AI Security Engineer

Washington, DC · Remote

$141K - $236K/yr

This role supports Authorization and Accreditation (A&A), Risk Management Framework (RMF) ATO ... For Remote Opportunities), education and certifications as well as Federal Government Contract ...

SAIC

Cybersecurity Engineer - ISSO

Vienna, VA · On-site +1

$160K - $200K/yr

None Potential for Remote Work: ORA_ON_SITE Description SAIC is seeking a Cyber Security Engineer ... Execute RMF processes for Assessment & Authorization (A&A). * Develop/maintain SSPs, POA&Ms, SARs ...

SkyePoint Decisions

RAS Project Manager

Washington, DC · Remote

$135K - $165K/yr

... RMF, Governance, Risk & Compliance (GRC), Vulnerability Management, Incident Response, and Technical Operations teams to support research systems and applications. This position is a fully remote ...

ICF

Manager, Cyber Security

Reston, VA · Remote

$115K - $156K/yr

... require RMF alignment, assessment documentation, POA&M management, contingency planning ... This position is remote within the United States. Please note that ICF monitors employee work ...

System One

Junior Security Control Assessor

Bethesda, MD · Remote

$100K - $115K/yr

Bethesda, MD (mostly remote, occasional onsite required) Work schedule: 40 hrs/week Compensation ... NIST RMF (800-37) and NIST SP 800-53 Rev. 5 * JCAM methodology * Experience reviewing security ...

System One

Junior Security Control Assessor

Bethesda, MD · Remote

$100K - $115K/yr

Bethesda, MD (mostly remote, occasional onsite required) Work schedule: 40 hrs/week Compensation ... NIST RMF (800-37) and NIST SP 800-53 Rev. 5 * JCAM methodology * Experience reviewing security ...

previous page

Showing results 41-60

All JobsRmf JobsRemote Rmf JobsRemote Rmf Jobs in Reston, VA

Remote Rmf information

See Reston, VA salary details

$30.7K

$98.8K

$177.4K

How much do remote rmf jobs pay per year?

As of Aug 22, 2026, the average yearly pay for remote rmf in Reston, VA is $98,756.00, according to ZipRecruiter salary data. Most workers in this role earn between $51,500.00 and $132,600.00 per year, depending on experience, location, and employer.

What is a remote RMF?

A Remote RMF (Risk Management Framework) job involves managing cybersecurity risk and compliance for an organization while working remotely. Professionals in this role ensure that IT systems align with federal security standards, such as those outlined by NIST. Responsibilities may include conducting risk assessments, implementing security controls, and maintaining compliance documentation. Remote RMF specialists often work with government agencies, contractors, or private companies handling sensitive data. This position requires expertise in cybersecurity policies, risk management, and regulatory compliance.

What are the typical daily responsibilities of a remote RMF?

As a Remote RMF Specialist, your daily responsibilities often include conducting security assessments, preparing and reviewing authorization packages, and ensuring ongoing compliance with federal information security standards. You'll collaborate with cross-functional teams to identify risks, develop mitigation strategies, and document security control implementations. Regular communication with stakeholders, participation in virtual meetings, and continual monitoring of systems and processes to ensure compliance are also core aspects of the job. This role leverages remote work tools to collaborate effectively with cybersecurity, IT, and compliance professionals across multiple locations.

What are the key skills and qualifications needed to thrive in the remote RMF position, and why are they important?

To thrive as a Remote RMF (Risk Management Framework) Specialist, you need a strong understanding of information security principles, federal risk management frameworks (such as NIST SP 800-37), and relevant cybersecurity policies, typically backed by a degree in information security or related field. Familiarity with security assessment tools, governance, risk, and compliance (GRC) software, as well as certifications like CISSP, CAP, or CISM, is highly valued. Excellent organizational skills, attention to detail, and the ability to communicate complex security concepts clearly are important soft skills. These capabilities are critical to ensure regulatory compliance and robust information system security in a remote work context.

What are popular job titles related to Remote Rmf jobs in Reston, VA?

For Remote Rmf jobs in Reston, VA, the most frequently searched job titles are:

What job categories do people searching Remote Rmf jobs in Reston, VA look for?

The top searched job categories for Remote Rmf jobs in Reston, VA are:

What cities near Reston, VA are hiring for Remote Rmf jobs?

Cities near Reston, VA with the most Remote Rmf job openings:

Remote Rmf jobs near you
Infographic showing various Remote Rmf job openings in Reston, VA as of August 2026, with employment types broken down into 91% Full Time, 4% Part Time, and 5% Contract. Highlights an 87% Physical, 5% Hybrid, and 8% Remote job distribution, with an average salary of $98,756 per year, or $47.5 per hour.

Cybersecurity Assessment and Authorization Subject Matter Expert (SME) (59788)

Beshenich & Muir Associates

Fort Myer, VA • On-site, Remote

Full-time

Medical, Dental, Vision, Retirement

Re-posted 24 days ago

Job description

BMA is seeking a Cybersecurity Assessment and Authorization Subject Matter Expert (SME) to support the DLA JETS Cybersecurity Assessment and Authorization Support Services program. This is a fully remote position and contingent on contract award.
Job Summary
BMA is seeking a Cybersecurity Assessment and Authorization Subject Matter Expert (SME)to support the DLA Cybersecurity Assessment and Authorization Support Services contract. This is a Key Personnel position for the upcoming bid proposal for this work. The analyst serves as a cybersecurity Subject Matter Expert (SME) supporting the DLA J6 Cybersecurity Program, providing technical expertise in the authorization of information systems and cybersecurity compliance activities across DLA's enterprise IT and Operational Technology (OT) environments. This role supports the assessment, authorization, and continuous monitoring of information systems under the Risk Management Framework (RMF) and ensures compliance with DoD cybersecurity policies, federal information security regulations, and DLA cybersecurity implementation guidance. The analyst performs cybersecurity validation activities throughout the DoD System Development Life Cycle (SDLC) and assists program offices, Information System Security Managers (ISSMs), and Authorizing Officials (AOs) in maintaining the security posture of DLA systems. The position supports complex enterprise environments including large and small enclaves, applications, and outsourced IT services, ensuring security controls are implemented, assessed, and monitored in accordance with NIST SP 800-53, DoD cybersecurity policy, and the DLA RMF Implementation Process Guide.
Key Responsibilities include but are not limited to:
  1. Cybersecurity Assessment and Authorization Support: Provides cybersecurity subject matter expertise supporting authorization and accreditation activities for DLA information systems. Assists ISSMs and AOs with implementation of the DoD Risk Management Framework throughout the system development lifecycle, conducts security control reviews and authorization package analysis, and supports cybersecurity activities across IT, Platform IT (PIT), and Operational Technology / Facility Related Control Systems environments.
  2. RMF Execution: Supports execution of all phases of the RMF authorization process, including system categorization, security control selection, implementation validation, security control assessment, authorization, and continuous monitoring. Assists in the development and maintenance of RMF documentation and supports system registration and cybersecurity documentation management within the Enterprise Mission Assurance Support Service environment.
  3. Security Control Assessment and Compliance Validation: Evaluates the implementation and effectiveness of security controls defined in NIST SP 800-53 and DoD cybersecurity guidance. Conducts security control validation reviews, identifies non-compliant controls and vulnerabilities, determines severity levels, assesses impacts to system authorization status, and provides mitigation strategies and remediation recommendations.
  4. Cybersecurity Risk Analysis and Vulnerability Management: Analyzes security findings and vulnerabilities identified through cybersecurity assessments and scanning tools. Determines the operational and security impact of vulnerabilities on system authorization and risk posture, supports remediation activities, tracks vulnerabilities through Plans of Action and Milestones (POA&M), and assists with monitoring vulnerabilities identified through ACAS scans and IAVA alerts.
  5. Documentation, Reporting, and Briefings: Develops cybersecurity assessment documentation supporting system authorization packages, maintains documentation repositories for system and organizational artifacts, prepares and delivers briefings to government stakeholders and senior leadership, and provides cybersecurity status reports and recommendations to Program Managers, ISSMs, and Authorizing Officials.
  6. Cybersecurity Program Coordination: Coordinates cybersecurity activities with program offices, system managers, and security personnel across the DLA enterprise to support effective execution of authorization and compliance efforts.

Clearance Requirements
There is a Secret Security clearance requirement for this position.
Required Skills & Certifications
  • Current DoD 8570.01/8140 IAM Level III certification that includes one or more of the following: CISM, CISSP, GSLC, or CCISO.
  • Five or more years of relevant Certification and Accreditation (C&A) and/or RMF cybersecurity experience.
  • Demonstrated experience supporting DoD cybersecurity programs and system authorization processes.
  • Strong understanding of Risk Management Framework (RMF) implementation and NIST cybersecurity standards.
  • Experience assessing security controls and conducting authorization reviews within large, complex enterprise environments.
  • Ability to evaluate vulnerabilities, assess risk, and determine impacts to system authorization status.
  • Strong analytical, technical documentation, and communication skills.

Desired Skills & Certifications
  • Experience supporting DoD or DLA program offices.
  • Experience supporting DoD or DLA environments.
  • Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, Business Administration, or a related field.
  • Five or more years of leadership experience with progressively increasing responsibility managing technical teams, programs, or contracts.
  • At least one year of program or project management experience.
  • Current Project Management Professional (PMP) certification or an equivalent recognized project management certification.
  • Current Risk Management Professional certification such as PMP-RMP, CRISC, CISA, CISM, CGRC, or RIMS-CRMP.

Other Duties
  • Able to travel within a week's notice.
  • This job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job.
  • Duties, responsibilities, and activities may change at any time with or without notice.

Overview
BMA is an employee-owned small business headquartered in Huntsville, AL that provides superior customer service by empowering all levels of our staff to make timely decisions to produce high-quality results. BMA fosters an environment of passion, precision, and dedication in order to fulfill our commitments to our partners, government, and country.
Benefits
We believe that our employees well-being is paramount to our success so our benefits package has been crafted with that in mind. We offer multiple healthcare coverage options to include low deductible, high deductible, and plans eligible for our Health Savings Account (HSA) option. Along with medical coverage, employees have dental, vision, accident & illness, short- and long-term disability all available to them. BMA proudly maintains a 401(k) plan with an industry leading 6% match that can include profit sharing based on company performance. Lastly, being an employee-owned company means that BMA offers a 100% Employee Stock Ownership Plan (ESOP), providing eligible employees the opportunity to earn stock in BMA, subject to plan eligibility and vesting requirements.
AAP & EEO Statement
Beshenich Muir & Associates, LLC (BMA) is an Equal opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable Federal, State, or Local Law.

Apply