Cybersecurity RMF Specialist
Overview
Millennium is proud to be part of the Markon enterprise, a network of specialized organizations united in support of critical national security missions. This partnership strengthens our ability to deliver results by expanding our technical depth, operational reach, and access to a broader bench of proven experts, ensuring our customers continue to receive best-in-class cybersecurity support.Since 2004, Millennium has operated at the forefront of cybersecurity. Our elite team of over 300 professionals brings an unmatched record of performance across Red Team Operations, Defensive Cyber Operations, Software Engineering, and Technical Engineering. As home to the largest contingent of contracted Red Team operators supporting the Department of Defense, Millennium delivers unparalleled threat intelligence and battle-tested expertise to both DoD and federal civilian customers.
What We Believe
Millennium is an equal opportunity employer and does not discriminate or allow discrimination on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state, or local law.
Responsibilities
Millennium Corporation is hiring a Cybersecurity RMF Specialist to work 100% REMOTE. The candidate must have an active TS/SCI clearance.
The focus of this position is to develop cybersecurity policy and provide RMF support for the deployment of Storage and Compute, Network Transport, User Support, and Cyber Security in a cloud environment is support of the US Army. The ideal candidate will have the following experience w and qualifications:
Risk Management Framework (RMF) 2.0. The candidate must be experienced with obtaining and maintaining Army level accreditation for innovative programs and capabilities. The candidate must demonstrate a practical knowledge of the Army’s RMF 2.0 approach to cybersecurity. They must also be able to develop plans that can clearly delineate how to work within existing policies and procedures, while supporting the redefinition of cybersecurity in relation to cloud services provided as a service in a hybrid operational environment.
Continuous monitoring. The candidate must be experienced with developing a plan for and overseeing the delivery of continuous monitoring tools and capabilities that deliver accountable governance that includes cybersecurity control compliance, critical operational data, and visibility into contract Service Level Agreement (SLA) delivery.
DoD level Exceptions to Policy: The candidate must be experienced with obtaining and maintaining DoD level exceptions to policy. They must be familiar with policies, procedures, and stakeholder entities involved in the process. They must also have experience working with HQDA G6 and CIO offices in support of these efforts.
CSSP alignment: The candidate will have experience driving the alignment of the US Army CSSP activities, priorities, and objectives in support of US Army mission requirements. They must be able to demonstrate a knowledge of the players and organization principles and procedures at RCC-C and C5ISR.
Zero Trust: The candidate must have experience with the Army and DoD Zero Trust plans and policies and how they will impact the operationalization of data-centric cybersecurity.
DevSecOps (DSO): The candidate must have experience with the practical application of DSO with a focus on identifying policy and technical roadblocks that might delay or otherwise undermine the delivery of innovative capabilities.
Broad view of Cybersecurity: The candidate must have experience evaluating innovative cybersecurity technologies for Federal Government clients and delivering policy and contractual implications. They must have a functional understanding of the interrelationship between operations and compliance-based cybersecurity, to include strategy, governance, risk and compliance, disaster recovery, business operations, and their contractual implications.
Hands on experience with Microsoft Azure security product (MDE, Intune, and Sentinel)
Data Management experience analyzing logs, SIEM and SOAR.
Integration of Legacy cybersecurity infrastructure to include Trellix, Forescout, Tychon and Policy Auditor
Qualifications
Candidate must have an active Top Secret with SCI eligibility
Bachelor’s degree from an accredited university and 6 Years of professional experience and 3 years of relevant Experience or Two years of relevant experience with an Associate’s degree will be considered the equivalent of a Bachelor’s degree. Four years of relevant experience will be considered equivalent to a Bachelor’s degree.
Preferred:
Ability to work as part of a professional diverse team and independently.
Experience evaluating and delivering recommendations on new cybersecurity technologies for Federal Government clients. Have a deep understanding of the relationship between physical security, cyber security, and the human component.
6+ years of relevant work experience
CISSP Certification desired
Business Development
Assist with Business Development activities as required to support Millennium's strategic business objectives, which may include but not limited to participation in technical interviews, creation of technical documentation, general proposal writing support and proposal color reviews.
Physical Requirements
Must be comfortable with prolonged periods of sitting at a desk and working on a computer.
Must be able to lift up to 10-15 pounds at a time.
Travel Requirements
Apply To This Job
Millennium is proud to be part of the Markon enterprise, a network of specialized organizations united in support of critical national security missions. This partnership strengthens our ability to deliver results by expanding our technical depth, operational reach, and access to a broader bench of proven experts, ensuring our customers continue to receive best-in-class cybersecurity support.Since 2004, Millennium has operated at the forefront of cybersecurity. Our elite team of over 300 professionals brings an unmatched record of performance across Red Team Operations, Defensive Cyber Operations, Software Engineering, and Technical Engineering. As home to the largest contingent of contracted Red Team operators supporting the Department of Defense, Millennium delivers unparalleled threat intelligence and battle-tested expertise to both DoD and federal civilian customers.
What We Believe
Millennium is an equal opportunity employer and does not discriminate or allow discrimination on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state, or local law.
Responsibilities
Millennium Corporation is hiring a Cybersecurity RMF Specialist to work 100% REMOTE. The candidate must have an active TS/SCI clearance.
The focus of this position is to develop cybersecurity policy and provide RMF support for the deployment of Storage and Compute, Network Transport, User Support, and Cyber Security in a cloud environment is support of the US Army. The ideal candidate will have the following experience w and qualifications:
Risk Management Framework (RMF) 2.0. The candidate must be experienced with obtaining and maintaining Army level accreditation for innovative programs and capabilities. The candidate must demonstrate a practical knowledge of the Army’s RMF 2.0 approach to cybersecurity. They must also be able to develop plans that can clearly delineate how to work within existing policies and procedures, while supporting the redefinition of cybersecurity in relation to cloud services provided as a service in a hybrid operational environment.
Continuous monitoring. The candidate must be experienced with developing a plan for and overseeing the delivery of continuous monitoring tools and capabilities that deliver accountable governance that includes cybersecurity control compliance, critical operational data, and visibility into contract Service Level Agreement (SLA) delivery.
DoD level Exceptions to Policy: The candidate must be experienced with obtaining and maintaining DoD level exceptions to policy. They must be familiar with policies, procedures, and stakeholder entities involved in the process. They must also have experience working with HQDA G6 and CIO offices in support of these efforts.
CSSP alignment: The candidate will have experience driving the alignment of the US Army CSSP activities, priorities, and objectives in support of US Army mission requirements. They must be able to demonstrate a knowledge of the players and organization principles and procedures at RCC-C and C5ISR.
Zero Trust: The candidate must have experience with the Army and DoD Zero Trust plans and policies and how they will impact the operationalization of data-centric cybersecurity.
DevSecOps (DSO): The candidate must have experience with the practical application of DSO with a focus on identifying policy and technical roadblocks that might delay or otherwise undermine the delivery of innovative capabilities.
Broad view of Cybersecurity: The candidate must have experience evaluating innovative cybersecurity technologies for Federal Government clients and delivering policy and contractual implications. They must have a functional understanding of the interrelationship between operations and compliance-based cybersecurity, to include strategy, governance, risk and compliance, disaster recovery, business operations, and their contractual implications.
Hands on experience with Microsoft Azure security product (MDE, Intune, and Sentinel)
Data Management experience analyzing logs, SIEM and SOAR.
Integration of Legacy cybersecurity infrastructure to include Trellix, Forescout, Tychon and Policy Auditor
Qualifications
Candidate must have an active Top Secret with SCI eligibility
Bachelor’s degree from an accredited university and 6 Years of professional experience and 3 years of relevant Experience or Two years of relevant experience with an Associate’s degree will be considered the equivalent of a Bachelor’s degree. Four years of relevant experience will be considered equivalent to a Bachelor’s degree.
Preferred:
Ability to work as part of a professional diverse team and independently.
Experience evaluating and delivering recommendations on new cybersecurity technologies for Federal Government clients. Have a deep understanding of the relationship between physical security, cyber security, and the human component.
6+ years of relevant work experience
CISSP Certification desired
Business Development
Assist with Business Development activities as required to support Millennium's strategic business objectives, which may include but not limited to participation in technical interviews, creation of technical documentation, general proposal writing support and proposal color reviews.
Physical Requirements
Must be comfortable with prolonged periods of sitting at a desk and working on a computer.
Must be able to lift up to 10-15 pounds at a time.
Travel Requirements
Apply To This Job