Mind Computing is seeking a full-time, 100% remote Cybersecurity Engineer (System Steward) to support a Department of Veterans Affairs (VA) project by identifying, mitigating cybersecurity risks and maintaining a strong information system security posture. The ideal candidate will provide expertise in Authority to Operate (ATO), the NIST Risk Management Framework (RMF), security controls, cloud security, and governance, risk, and compliance (GRC). The Cybersecurity Engineer will support RMF activities across the full ATO lifecycle, develop and maintain security documentation and artifacts, assess system risks and vulnerabilities, and coordinate with system administrators, developers, system owners, ISSOs, and other stakeholders to address security requirements and authorization gaps.

The candidate must reside within the continental US.

Responsibilities:

• Provide cybersecurity consulting and technical support to VA stakeholders for ATO, security authorization, and NIST RMF activities.
• Support RMF Steps 1–7, including security categorization, control implementation, assessment, authorization, and continuous monitoring.
• Lead and coordinate security and privacy activities within project teams, including development and maintenance of required RMF security artifacts.
• Develop and maintain security documentation, including Incident Response, Contingency Planning, Disaster Recovery, POA&M, and other authorization documentation.
• Analyze authorization packages and security artifacts to identify gaps, establish remediation plans, and coordinate resolution with system stakeholders.
• Conduct security risk assessments, impact analyses, gap assessments, compensating control evaluations, and residual risk assessments.
• Assess IT products, operating systems, and security configurations for compliance with NIST SP 800-53 and applicable security policies.
• Develop and implement security controls and support remediation of identified vulnerabilities and compliance findings.
• Support security configuration and compliance activities for infrastructure, operating system images, and IT product deployments.
• Prepare and present security reports, briefings, risk assessments, and recommendations to technical and non-technical stakeholders.
• Collaborate with system administrators, developers, system owners, ISSOs, and internal/external customers to assess the security impact of hardware, software, and configuration changes.
• Take on additional tasks and responsibilities as needed to support team objectives and ensure the success of the project.