• Engineer and implement security controls to support system ATO and ongoing authorization • Lead and support Risk Management Framework (RMF) activities from system categorization through authorization and continuous monitoring • Develop, review, and maintain ATO documentation including SSPs, SAPs, SARs, POA&Ms, and supporting artifacts • Map and implement security controls in accordance with NIST SP 800-53, DoDI 8510.01, and DoD cybersecurity policies • Support security control assessments and coordinate with Authorizing Officials (AOs) and assessors • Perform security engineering analysis to ensure system designs meet confidentiality, integrity, and availability (CIA) requirements • Conduct vulnerability assessments and support remediation efforts to reduce risk prior to and after ATO • Analyze system changes and assess security impact to maintain ATO posture • Support continuous monitoring activities, including vulnerability scanning, STIG compliance, and annual assessments • Utilize eMASS to manage RMF artifacts, control status, and ATO packages • Provide guidance on secure system configurations, hardening, and best practices • Support audits, inspections, and compliance reviews