below marketmost similar roles pay hereabove market
This listing doesn't post a salary. Most similar roles pay
$142,400–$194,625.
Based on 240 similar postings.
Employer
About Booz Allen Hamilton
Booz Allen Hamilton is a management and technology consulting firm that provides analytics, digital, engineering, and cybersecurity solutions primarily to U.S. government agencies and commercial clients. Industry: Management & Technology Consulting
Booz Allen Hamilton currently has
1662 open roles
on FindRole.
Listed pay typically runs
$86,800–$198,000
across 904 roles with salary data.
The Cybersecurity RMF Lead will design, implement, and manage policies and procedures to ensure database and software security. Working with minimal direction, the individual will mentor team members and develop innovative solutions to complex problems. Key responsibilities include supporting system categorization, control selection, implementation, and continuous monitoring. The role involves managing Assessment & Authorization activities, including evidence collection, POA&M updates, and security documentation. The candidate must evaluate security controls using NIST SP 800 53 to ensure compliance throughout the system lifecycle while integrating Zero Trust principles into system security architecture. Required skills include RMF expertise, a Secret clearance, and certifications like CASP+, Security+, or SSCP. The position also involves conducting security engineering analyses and integrating RMF workflows with DevSecOps or Agile execution environments.
Design, implement, and manage policies and procedures to ensure database and software security.
Lead RMF efforts including system categorization, control selection, implementation, and continuous monitoring.
Support Assessment & Authorization activities by collecting evidence and updating POA&Ms.
Evaluate and interpret security controls such as NIST SP 800-53 to ensure lifecycle compliance.
Integrate Zero Trust principles into RMF packages and system security architecture.
Conduct security engineering analyses to advise system owners on risk impacts and mitigations.
Perform enterprise risk assessments and document findings to advise leadership on security posture.
Integrate RMF workflows with DevSecOps or Agile environments for sprint-based compliance validation.
What we're looking for
5+ years of experience with RMF, including system categorization, control selection, implementation, and continuous monitoring.
Experience supporting Assessment & Authorization (A&A) activities such as evidence collection, POA&M updates, and security documentation.
Experience evaluating and interpreting security controls such as NIST SP 800 53 to ensure compliance throughout the system lifecycle.
Experience integrating Zero Trust principles into RMF packages and system security architecture.
Bachelor’s degree in Management Information Systems, Information Technology, Computer Science, Mathematics, Business, Engineering, or Physical Science.
CompTIA Advance Security Practitioner (CASP+), CompTIA Security+, or Systems Security Certified Practitioner (SSCP) Certification.
Experience leading RMF efforts across multiple systems, conducting security engineering analyses, or integrating RMF with DevSecOps (preferred).
RMF
NIST 800-53
Zero Trust
STIGs
Vulnerability Management
ATO
POA&M
Continuous Monitoring
DevSecOps
AWS
Microsoft Azure
Big Data Analytics
Information Systems Security
Secure Cloud
IL5
SecurityX
CISM
CISSP
CCSP