Cybersecurity Engineer – System Steward (Remote)

About the role

Mind Computing is looking for a full‑time, 100 % remote Cybersecurity Engineer to support a Department of Veterans Affairs (VA) project. The role focuses on achieving and maintaining Authority to Operate (ATO) through the NIST Risk Management Framework (RMF) and ensuring a strong security posture across cloud and on‑premise environments.

Key responsibilities

• Provide cybersecurity consulting and technical support to VA stakeholders for ATO, security authorization, and NIST RMF activities.
• Support all RMF steps (1‑7), including security categorization, control implementation, assessment, authorization, and continuous monitoring.
• Lead and coordinate security and privacy activities, developing and maintaining required RMF artifacts.
• Develop and maintain security documentation such as Incident Response, Contingency Planning, Disaster Recovery, and POA&M.
• Analyze authorization packages, identify gaps, and coordinate remediation with system owners and ISSOs.
• Conduct risk assessments, impact analyses, gap assessments, and evaluate compensating controls.
• Assess IT products, operating systems, and configurations for compliance with NIST SP 800‑53 and internal policies.
• Implement security controls, remediate vulnerabilities, and support compliance for infrastructure and software deployments.
• Prepare and present security reports, briefings, and recommendations to technical and non‑technical audiences.
• Collaborate with system administrators, developers, owners, and external customers to evaluate security impacts of changes.

Required profile

• U.S. residency within the continental United States.
• Demonstrated experience with Authority to Operate (ATO) processes and the NIST Risk Management Framework.
• Strong knowledge of NIST SP 800‑53 security controls and cloud security best practices.
• Ability to produce and maintain RMF security artifacts and documentation.
• Excellent communication skills for interacting with technical and non‑technical stakeholders.

Required skills

• NIST Risk Management Framework (RMF)
• Authority to Operate (ATO) procedures
• NIST SP 800‑53 security controls
• Cloud security
• Governance, Risk & Compliance (GRC)
• Risk assessment and vulnerability remediation
• Security documentation (Incident Response, Contingency Planning, Disaster Recovery, POA&M)
• Security control implementation