5+ years of experience supporting RMF authorization activities, such as NIST SP 800-37 or SP 800-53, on DoD or IC information systems
Experience with continuous monitoring tooling such as ACAS, Nessus, SCAP, or STIG Viewer, and vulnerability remediation coordination
Experience with categorization methodology under FIPS 199 and NIST SP 800-60, and with impact-level determinations for classified or national security systems under CNSSI 1253
Knowledge of eMASS, including package population, artifact management, POA&M; tracking, and control inheritance or hybrid control management
Ability to read, interpret, and apply control assessment procedures and produce assessment-ready documentation without extensive rework
Ability to document security rationale clearly enough for AO or SCA review without additional translation by the ISSM
TS/SCI clearance
HS diploma or GED
Information Security Certification, including CEH, CISM, CCSP, CCSK, CISSP, or CompTIA Security+ Certification
TS/SCI clearance is required.