Execute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO). Identify ...
Quick apply
Execute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO). Identify ...
Quick apply
Execute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO). Identify ...
Execute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO). Identify ...
Quick apply
Execute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO). Identify ...
Execute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO)
Execute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO)
Philadelphia, PA · On-site +1
Perform RMF Annual Security Reviews (ASRs) IAW the RMF Process Guide (RPG), NAVSEA Business Rules, and NAVSEA Standard Operating Procedures (SOPs). * Document, assess, and seek approval for system ...
Philadelphia, PA · On-site +1
Perform RMF Annual Security Reviews (ASRs) IAW the RMF Process Guide (RPG), NAVSEA Business Rules, and NAVSEA Standard Operating Procedures (SOPs). * Document, assess, and seek approval for system ...
Hamilton, NJ · On-site +1
$82K - $142K/yr
Remote Reporting To: Freddie Benison Compensation: $82,000 - $142,000 / year Description Augustine ... Ensure compliance with DoW cybersecurity requirements, including RMF, NIST 800-53, STIGs, CMMC, and ...
Hamilton, NJ · On-site +1
$82K - $142K/yr
Remote Reporting To: Freddie Benison Compensation: $82,000 - $142,000 / year Description Augustine ... Ensure compliance with DoW cybersecurity requirements, including RMF, NIST 800-53, STIGs, CMMC, and ...
Philadelphia, PA · On-site
... Secret Remote Type Hybrid Time Type Full time Description & Requirements Shape the future of ... Familiarity with NIST SP 800-82, IEC 62443, RMF (NIST SP 800-37), and DoD cybersecurity policy
Philadelphia, PA · On-site
... Secret Remote Type Hybrid Time Type Full time Description & Requirements Shape the future of ... Familiarity with NIST SP 800-82, IEC 62443, RMF (NIST SP 800-37), and DoD cybersecurity policy
Philadelphia, PA · Remote
All work (including remote work) must be conducted in the United States. Candidate must work EST business hours.** Our direct client has an opening for a Sr IT Security Specialists w/ Healthcare Exp ...
Quick apply
Philadelphia, PA · Remote
All work (including remote work) must be conducted in the United States. Candidate must work EST business hours.** Our direct client has an opening for a Sr IT Security Specialists w/ Healthcare Exp ...
Trenton, NJ · Remote
All work (including remote work) must be conducted in the United States. Candidate must work EST business hours.** Our direct client has an opening for a Sr IT Security Specialists w/ Healthcare Exp ...
Quick apply
Trenton, NJ · Remote
All work (including remote work) must be conducted in the United States. Candidate must work EST business hours.** Our direct client has an opening for a Sr IT Security Specialists w/ Healthcare Exp ...
Philadelphia, PA · Remote
$50 - $100/hr
Contribute to developing cutting-edge AI systems, while enjoying the flexibility of remote work and setting your own schedule. We are looking for existing cybersecurity professionals to help advance ...
Quick apply
Philadelphia, PA · Remote
$50 - $100/hr
Contribute to developing cutting-edge AI systems, while enjoying the flexibility of remote work and setting your own schedule. We are looking for existing cybersecurity professionals to help advance ...
Trenton, NJ · On-site +1
$69K - $117K/yr
Central Office, 1001 Spruce Street, Trenton, NJ Job Type: Full Time Remote Employment: Flexible/Hybrid Job Number: 2026-12636 Central Office/Vicinage: Central Office Division: ITO (Information ...
Trenton, NJ · On-site +1
$69K - $117K/yr
Central Office, 1001 Spruce Street, Trenton, NJ Job Type: Full Time Remote Employment: Flexible/Hybrid Job Number: 2026-12636 Central Office/Vicinage: Central Office Division: ITO (Information ...
Philadelphia, PA · Remote
BeyondTrust for privileged secure remote access management * Familiarity with other vendor tools such as Cisco (network security), ServiceNow (ticketing and workflow integration), Splunk (SIEM/log ...
Philadelphia, PA · Remote
BeyondTrust for privileged secure remote access management * Familiarity with other vendor tools such as Cisco (network security), ServiceNow (ticketing and workflow integration), Splunk (SIEM/log ...
Flexible remote work environment with the opportunity for travel. * Ongoing professional development and training opportunities. * Collaborative and inclusive company culture that values diversity.
Flexible remote work environment with the opportunity for travel. * Ongoing professional development and training opportunities. * Collaborative and inclusive company culture that values diversity.
$29.4K - $42.2K
23% of jobs
$46K is the 25th percentile. Wages below this are outliers.
$42.2K - $55K
6% of jobs
$55K - $67.8K
5% of jobs
$67.8K - $80.6K
6% of jobs
The median wage is $89K / yr.
$80.6K - $93.4K
14% of jobs
$93.4K - $106.2K
8% of jobs
$106.2K - $119K
12% of jobs
$119.4K is the 75th percentile. Wages above this are outliers.
$119K - $131.8K
8% of jobs
$131.8K - $144.6K
8% of jobs
$144.6K - $157.4K
5% of jobs
$157.4K - $170.2K
3% of jobs
$29.4K
$94.8K
$170.2K
A Remote RMF (Risk Management Framework) job involves managing cybersecurity risk and compliance for an organization while working remotely. Professionals in this role ensure that IT systems align with federal security standards, such as those outlined by NIST. Responsibilities may include conducting risk assessments, implementing security controls, and maintaining compliance documentation. Remote RMF specialists often work with government agencies, contractors, or private companies handling sensitive data. This position requires expertise in cybersecurity policies, risk management, and regulatory compliance.
As a Remote RMF Specialist, your daily responsibilities often include conducting security assessments, preparing and reviewing authorization packages, and ensuring ongoing compliance with federal information security standards. You'll collaborate with cross-functional teams to identify risks, develop mitigation strategies, and document security control implementations. Regular communication with stakeholders, participation in virtual meetings, and continual monitoring of systems and processes to ensure compliance are also core aspects of the job. This role leverages remote work tools to collaborate effectively with cybersecurity, IT, and compliance professionals across multiple locations.
To thrive as a Remote RMF (Risk Management Framework) Specialist, you need a strong understanding of information security principles, federal risk management frameworks (such as NIST SP 800-37), and relevant cybersecurity policies, typically backed by a degree in information security or related field. Familiarity with security assessment tools, governance, risk, and compliance (GRC) software, as well as certifications like CISSP, CAP, or CISM, is highly valued. Excellent organizational skills, attention to detail, and the ability to communicate complex security concepts clearly are important soft skills. These capabilities are critical to ensure regulatory compliance and robust information system security in a remote work context.

Philadelphia, PA • Remote
Full-time
Medical, Retirement, PTO
Posted 8 days ago
ROLE: Information System Security Engineer (ISSE) II
REQUIRED:
Active, final Secret with immediate eligibility for a faborable T5 investigation
4-yr STEM degree
Active IAT II or IAM II certification
Ability to work onsite at NSWC-PD
Demonstrable 3 YoE information assurance & security: Professional experience capturing and refining information security operational and security requirements and ensuring those requirements are properly addressed through purposeful architecting, design, development, and configuration; and implementing security controls, configuration changes, software/hardware updates/patches, vulnerability scanning, and securing configurations.
RESPONSIBILITIES:
Assist with the developing, maintaining, and tracking Risk Management Framework (RMF) system security plans which include System Categorization Forms, Platform Information Technology (PIT) Determination Checklists, Assess Only (AO) Determination Checklists, Implementation Plans, System Level Continuous Monitoring (SLCM) Strategies, System Level Policies, Hardware Lists, Software List, System Diagrams, Privacy Impact Assessments (PIA), and Plans of Action and Milestones (POA&M). Execute the RMF process in support of obtaining and maintaining Interim Authority to Test (IATT), AO approval, Authorization to Operate (ATO), and Denial of Authorization to Operate (DATO). Identify and tailor IT and CS security control baselines based on RMF guidelines and categorization of the RMF boundary. Perform Ports, Protocols, and Services Management (PPSM). Perform IT and CS vulnerability-level risk assessments. Execute security control testing as required by a risk assessment or annual security review (ASR). Mitigate and remediate IT and CS system level vulnerabilities for all assets withing the boundary per STIG requirements. Develop and maintain Plans of Actions and Milestones (POA&M) in Enterprise Mission Assurance Support Service (eMASS). Develop and maintain system level IT and CS policies and procedures for respective RMF boundaries and/or guidance provided by the command ISSMs. Implement and assess STIG and SRGs. Perform and develop vulnerability assessments with automated tools such as Assured Compliance Assessment Solution (ACAS), Security Content Automation Protocol (SCAP) Compliance Check (SCC) and Evaluate STIG. Deploy security updates to Information System components. Perform routine audits of IT system hardware and software components. Maintain inventory of Information System components. Participate in IT change control and configuration management processes. Upload vulnerability data in Vulnerability Remediation Asset Manager (VRAM). Image or re-image assets that are part of the assigned RMF boundary. Install software and troubleshoot software issues as necessary to support compliance of the RMF boundaries’ assets. Assist with removal of SSD, HDD or other critical components of assets before destruction and removal from the RMF boundary. Provide cybersecurity patching of assets in times of DoD and DoN TASKORDs, FRAGORDs, or even designated by Command ISSM, ACIO, and/or Code 104 management. Support configuration change documentation and control processes and maintaining DOD STIG Compliance. Support cyber compliance of assets that are part of an enterprise IT network to include Windows server and CISCO networking hardware. This includes assessing vulnerabilities, patching and meeting requirements of the STIG for the hardware. Report compliance issues of network hardware to management as not cause an operational of the network.
DESCRIPTION:
Constellation West is a 29-year WOSB and Prime Federal Contractor bidding on Information System Security work for IT Operations in support of NSWC-PD.
ABOUT US:
Constellation West is an award-winning company that delivers Information Technology (IT) engineering services and solutions and non-IT subject matter expertise worldwide. Established in 1997, Constellation West is an industry leader, partnering with key organizations. As a prime contractor or preferred subcontractor, we have a continual list of opportunities to fill nationwide with multiple agencies such as the Department of Veteran Affairs, the Department of Defense, civilian agencies, and the national intelligence community. Many positions supporting the U.S. federal government require our employees to be granted security clearances.
Constellation West strives to provide fully integrated solutions that cover all aspects of system and network engineering, administration, and management. We believe in attracting the right people ready to take on exciting challenges and be part of a dynamic team. Are you one of them? Do you have the expertise and knowledge to solve complex problems? If yes, join us and be a part of an exhilarating work environment that rewards your hard work and dedication. Don't miss out on this fantastic opportunity to make a difference!
Benefits include but are not limited to:
• Competitive 401(k) plan with employer matching
• Competitive Health Benefits with employer contributions
• 11 Paid Holidays per year
• 15 Days starting PTO for new hires
• Tuition/CE reimbursement
• Relocation Assistance
• Pre-Tax Commuter Benefit Accounts
• STD/LTD/Life Insurance with buyup options
• Veteran Hiring Preference
• Conversion to an Employee-owned firm (ESOP) in 2025—a lucrative benefit to employee-owners!
We are an Equal Opportunity Employer
Constellation West is proud to be an EEO/AA employer M/F/D/V
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law. Constellation West will not discharge or, in any other manner, discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor’s legal duty to furnish information. 41 CFR 60-1.35(c)
APPLY HERE TODAY