RMF Documentation and Quality Specialist (R-00116)

True Zero Technologies • Washington, DC

10d

About The Position

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence.

Requirements

• Experience: 3-5 years in cybersecurity, focusing on RMF, compliance, or technical writing.
• Knowledge: Strong understanding of NIST SP 800-37 Rev 2, NIST SP 800-53, and DoD Cybersecurity polices.
• Technical Writing: Excellent ability to translate complex technical requirements into clear, actionable documentation.
• Tools: Experience with eMASS, ServiceNow, Archer, or Jira is highly preferred
• Clearance: Active Secret or Top Secret security clearance is frequently required to obtain and maintain.

Nice To Haves

• Certifications: Security+, CISSP, or equivalent would be reccomended

Responsibilities

• Documentation Development: Draft and maintain critical RMF artifacts, including System Security Plans (SSP), Security Assessment Reports (SAR), Plan of Actions and Milestones (POA&M), and Configuration Management Plans.
• Quality Assurance & Compliance: Review technical documentation to ensure accuracy, completeness, and adherence to NIST 800-37, DoD, and other security policies.
• eMASS Management: Utilize the Enterprise Mission Assurance Support Service (eMASS) to manage, upload, and update authorization packages.
• Control Assessment: Assist in the assessment of security controls and provide recommendations for remediation of vulnerabilities.
• Stakeholder Coordination: Collaborate with system owners, ISSOs, and technical teams to gather necessary information and ensure compliance-by-design.
• Continuous Monitoring: Support the lifecycle management of information systems by maintaining documentation for continuous monitoring activities

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 11-50 employees