Dod Rmf

Dod Rmf Engineer Jobs

4 jobs found

Today

Senior Cybersecurity RMF Engineer

Creative Visions Washington, DC

Washington, DC

Today

Full time Senior Authorization To Operate Dod Rmf

Apply Now

Job Description

Creative Visions is seeking a Senior Cybersecurity RMF Engineer to support a prospective U.S. Army cybersecurity engineering and Risk Management Framework (RMF) program. This onsite role will be based at Aberdeen Proving Ground, Maryland, with work focused on implementing DoD RMF processes, performing security control assessments, supporting continuous monitoring, and maintaining authorization documentation to establish and sustain Authorities to Operate (ATOs) in DoD environments.

Responsibilities

Execute DoD RMF lifecycle activities, including security categorization, control selection, implementation, assessment, authorization, and continuous monitoring.
Develop, review, and maintain RMF authorization documentation, including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and related security artifacts.
Support ATO development, maintenance, and reauthorization activities for DoD information systems.
Conduct cybersecurity risk assessments, security control evaluations, and compliance reviews.
Assess system configurations against applicable DISA Security Technical Implementation Guides (STIGs), NIST security controls, and DoD cybersecurity requirements.
Identify, document, track, and support remediation of cybersecurity vulnerabilities and compliance deficiencies.
Perform continuous monitoring activities to maintain system security authorizations and compliance.
Support hardware and software inventory reconciliation, configuration management, and security baseline reviews.
Evaluate proposed hardware and software changes to determine potential cybersecurity risks and authorization impacts.
Support security control assessments, verification and validation activities, and Security Control Assessor (SCA) reviews.
Collaborate with cybersecurity architects, system administrators, network engineers, ISSOs, ISSMs, and Government stakeholders to address security requirements.
Support cybersecurity engineering activities involving Windows, Linux, and Apple operating systems.
Prepare technical reports, assessment findings, remediation recommendations, and cybersecurity compliance documentation.
Participate in technical reviews, configuration control activities, and cybersecurity planning meetings.

Required Qualifications

Minimum 5 years of professional experience supporting RMF lifecycle reporting and cybersecurity authorization activities.
Minimum 5 years of experience supporting hardware/software reconciliation, aligned with the PWS combined experience requirement.
Demonstrated experience supporting DoD RMF implementation and compliance activities.
Working knowledge of NIST SP 800-37 and NIST SP 800-53, along with applicable DoD cybersecurity policies.
Experience developing and maintaining RMF authorization documentation, including SSPs, SARs, and POA&Ms.
Experience supporting cybersecurity risk assessments, vulnerability management, and security control evaluations.
Familiarity with DISA STIGs, security configuration baselines, and vulnerability remediation processes.
Experience supporting configuration management and hardware/software inventory reconciliation.
Experience working with Windows, Linux, and Apple operating systems.
Experience supporting classified and unclassified information systems.
Strong analytical, technical documentation, and communication skills.

Technologies

NIST SP 800-37
NIST SP 800-53
DISA Security Technical Implementation Guides (STIGs)
Windows
Linux
Apple operating systems

Required Certification

CompTIA CASP+ / SecurityX or equivalent cybersecurity certification, consistent with DoD cybersecurity workforce qualification requirements.

Security Clearance

Active Secret security clearance required at the time of application.
Must be able to maintain required clearance and eligibility for access to DoD information systems, including SIPRNet environments, throughout contract performance.

Preferred Qualifications

Previous experience supporting U.S. Army or other DoD cybersecurity programs.
Experience using eMASS for RMF authorization documentation and workflow management.
Familiarity with ACAS, SCAP, STIG Viewer, and other DoD cybersecurity assessment tools.
Experience supporting SIPRNet or other classified network environments.
Experience performing security assessments across enterprise networks, servers, and cloud environments.
Familiarity with DoD Instruction 8510.01, DoD Instruction 8500.01, and Army cybersecurity regulations.
Experience supporting Security Control Assessors (SCAs), ISSOs, or ISSMs.
Additional cybersecurity certifications such as CISSP, CISM, or Security+.

Work Environment

Supports cybersecurity operations at Aberdeen Proving Ground, Maryland.
Candidates must be willing and able to work onsite as required by the Government.
Remote or hybrid arrangements may be considered only if authorized under the resulting contract.
May involve working with classified information systems and participating in cybersecurity activities requiring adherence to applicable DoD security procedures.

Location

Washington, DC (onsite)

View full job page →

7d ago

Cybersecurity Engineer - DoD RMF & Authorization

Fuse Integration San Diego, CA

San Diego, CA

7d ago

$120k - $160k/yr Full time Ato/iatt Cybersecurity Tools Dod Rmf

Apply Now

Job Description

Fuse Integration is seeking a Cybersecurity Engineer to support secure communications networks for U.S. defense agencies through DoD Risk Management Framework (RMF) execution and authorization package development. The role will lead hands-on RMF work across development, testing, authorization, and operational lifecycles, ensuring documentation, assessments, and continuous monitoring stay current in the eMASS environment.

This onsite position is located in San Diego, CA and requires 6+ years of professional experience, including DoD cybersecurity and RMF authorization support.

Responsibilities

Lead and support execution of the Department of Defense (DoD) Risk Management Framework (RMF) across development, testing, authorization, and operational lifecycle activities.
Develop, maintain, and manage complete RMF authorization packages supporting Authorizations to Operate (ATOs), Interim Authorizations to Test (IATTs), and ongoing authorization actions.
Prepare and maintain RMF artifacts including System Security Plans (SSPs), security control implementation statements, Plans of Action and Milestones (POA&Ms), hardware and software inventories, and system architecture documentation.
Manage RMF authorization packages within Enterprise Mission Assurance Support Service (eMASS), ensuring security control documentation and assessment evidence remain accurate, complete, and maintained.
Analyze security control implementations according to NIST SP 800-53, DoDI 8510.01, CNSSI 1253, applicable DISA Security Technical Implementation Guides (STIGs), and DoD cybersecurity policies.
Coordinate with ISSMs, ISSOs, SCAs, AOs, and government representatives to support security assessments and authorization decisions.
Evaluate system architectures, configurations, and operating environments to determine security control applicability, implementation approaches, and compliance needs.
Review and document vulnerability assessment results from ACAS, Nessus, SCAP, and STIG compliance assessments to identify security deficiencies, document associated risks, and recommend remediation.
Develop, maintain, and track POA&Ms, coordinating with engineering teams to resolve vulnerabilities, document mitigating factors, and support risk acceptance decisions.
Support Security Control Assessment (SCA) activities by preparing evidence, responding to findings, coordinating technical demonstrations, and addressing documentation deficiencies.
Develop and execute continuous monitoring activities to maintain cybersecurity posture and authorization status.
Assess system modifications, software updates, and configuration changes for their impact on security controls, authorization boundaries, and existing ATO/IATT conditions.
Partner with systems, software, and network engineers to ensure cybersecurity requirements are integrated into design, development, integration, and testing.
Provide technical guidance on secure configurations, operating system hardening, network security, virtualization, and vulnerability remediation aligned to DoD cybersecurity requirements.

Requirements

6–8 years of professional experience in DoD cybersecurity, information assurance, systems administration, network engineering, or related disciplines.
Experience supporting DoD RMF authorization activities, including development and maintenance of ATO and/or IATT packages.
Hands-on experience creating and maintaining RMF documentation such as SSPs, security control implementation statements, POA&Ms, and supporting assessment artifacts.
Experience using eMASS to document security controls, manage authorization artifacts, track assessment findings, and maintain RMF packages.
Strong working knowledge of NIST SP 800-53, DoD RMF requirements, and security control implementation and assessment methodologies.
Experience interpreting DISA STIG requirements and vulnerability assessment results to determine compliance and develop remediation recommendations.
Experience reviewing technical system configurations, network architectures, and security control implementations to support accurate RMF documentation.
Working knowledge of Linux and Windows including system administration, security hardening, access controls, and configuration management.
Familiarity with virtualization environments such as VMware, KVM, or Hyper-V.
Networking fundamentals knowledge including TCP/IP, VLANs, subnets, firewalls, routing, network segmentation, and secure communications.
Ability to analyze findings, document technical risks, and communicate remediation requirements to engineering teams and government stakeholders.
Strong technical writing skills for clear, accurate, and technically defensible security documentation.
Ability to independently manage multiple RMF deliverables and coordinate across engineering disciplines to meet program authorization milestones.
Ability to meet applicable DoD 8140 cybersecurity workforce qualification requirements for the assigned role.
U.S. citizenship and an Active Secret security clearance.

Technologies

Linux, Windows, VMware, KVM, Hyper-V
eMASS, ACAS, Nessus, SCAP, STIGs
TCP/IP, VLANs, firewalls
POA&Ms, System Security Plans (SSPs)
NIST SP 800-53, DoDI 8510.01, CNSSI 1253, DISA STIGs
DoD RMF, DoD 8140

Benefits

Medical, Dental, and Vision
Employee coverage fully funded; a portion of dependents’ coverage funded as well
11 paid Federal Holidays
Paid Time Off (PTO)
40 hours of paid sick leave per year
401k with employer matching
Annual bonuses
Cell phone reimbursement: $100/month

Preferred Qualifications

Experience independently managing DoD RMF authorization packages from initial system categorization through authorization and continuous monitoring.
Experience supporting successful ATO/IATT submissions, security assessments, and authorization package reviews.
Familiarity with Navy, Marine Corps, or Air Force RMF authorization processes and service-specific requirements.
Experience supporting cybersecurity accreditation of RDT&E systems, developmental systems, or operational DoD capabilities.
Experience coordinating directly with SCAs, AOs, government ISSMs, and other authorization stakeholders.
Experience performing security control inheritance analysis, developing system authorization boundaries, and identifying applicable overlays and control tailoring requirements.
Experience using ACAS, Nessus, SCAP, STIG Viewer, and other vulnerability assessment or compliance tools.
Experience with technical implementation of DISA STIGs and security hardening of Linux, Windows, networking equipment, and virtualized environments.
Familiarity with DoDI 8510.01, NIST SP 800-37, CNSSI 1253, and applicable DoD continuous monitoring guidance.
Knowledge of Navy C4ISR systems, military networks, or tactical data links.
Experience supporting cybersecurity requirements within Agile software development or systems engineering environments.
Experience assessing cybersecurity risks associated with custom software, specialized hardware, or mission-specific system architectures.

Salary: USD 120,000 - 160,000 per year.

View full job page →

26d ago

Senior Cybersecurity Engineer

Raytheon Tewksbury, MA

Tewksbury, MA

26d ago

$87k - $165k/yr Full time Senior Cybersecurity Tools Data Security

Apply Now

Job Description

Raytheon is seeking a Senior Cybersecurity Engineer to support onsite work in Tewksbury, MA. In this role, you will help define cybersecurity requirements and architect secure solutions for complex DoD systems, while supporting compliance deliverables tied to RMF/ATO activities and Agile execution.

Key Responsibilities

Define system level cybersecurity requirements and architect secure solutions across complex DoD environments.
Analyze security data, test results, and assessment findings to identify risk and drive remediation.
Prepare, maintain, and improve RMF/ATO documentation and other cybersecurity compliance artifacts.
Create cybersecurity architecture artifacts, strategies, implementation plans, and security policies.
Lead or guide vulnerability assessments, A&A activities, and remediation validation.
Partner with engineering and program teams to evaluate design alternatives and ensure secure system integration.
Conduct internal cybersecurity audits to verify control implementation and compliance.
Guide development and testing of security controls across networks, databases, operating systems, applications, and hardware/software components.
Champion Agile principles while serving as the team’s Scrum Master, facilitating ceremonies, removing impediments, and supporting predictable iterative delivery.
Maintain team-level Agile metrics, support backlog refinement, and coordinate with the Product Owner to ensure security work is defined and aligned with CDRL and program priorities, including sprint-based delivery of cybersecurity documentation, technical evidence, vulnerability responses, and security artifacts.

Required Qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related technical field, plus 5+ years of relevant experience.
Strong understanding of cybersecurity principles, compliance requirements, and the DoD Risk Management Framework (RMF) as defined in NIST SP 800-37.
Active and transferable U.S. government security clearance on day one; U.S. Citizenship required.
Experience applying security controls, hardening standards, and vulnerability mitigation across operating systems using NSA (FIPS), NIST (SP 800), DISA STIGs, and USCYBERCOM guidance.
Hands-on experience with network and system security administration, including secure configuration and account management for Windows, Red Hat Enterprise Linux, and common network platforms such as Cisco.
Familiarity with vulnerability scanning tools such as Nessus, OpenVAS, and SCC, including the ability to interpret results and apply remediation actions.
Proficiency working with cybersecurity documentation, configuration files, and scripting or automation to support evidence collection.
Experience serving as a Scrum Master or Agile facilitator, including leading ceremonies, maintaining team-level metrics, removing impediments, and supporting iterative delivery.
Hands-on experience as a Scrum Practitioner contributing by writing and refining user stories, estimating security-related tasks, and delivering high-quality cybersecurity documentation and artifacts each sprint.
Ability to collaborate closely with Product Owners, engineering teams, and stakeholders to maintain backlog clarity, prioritize work, and integrate security tasks into Agile planning cycles.

Technologies & Frameworks

DoD Risk Management Framework (RMF), NIST SP 800-37
NSA (FIPS), NIST (SP 800)
DISA STIGs, USCYBERCOM
Windows, Red Hat Enterprise Linux, Cisco
Nessus, OpenVAS, SCC
RMF/ATO, Agile, Scrum

Benefits

Medical, dental, vision
Life insurance
Short-term disability, long-term disability
401(k) match
Flexible spending accounts
Flexible work schedules
Employee assistance program
Employee Scholar Program
Parental leave
Paid time off, holidays

Security Clearance Requirements

Active and transferable U.S. government issued security clearance required prior to start date.
U.S. citizenship is required, as only U.S. citizens are eligible for a security clearance.
DoD Clearance: Secret
Security Clearance Status: Ability to obtain INTERIM U.S. government issued security clearance is required prior to start date.

Preferred Qualifications

Familiarity with DoDI 8510.01 and its role in directing RMF and ATO activities within DoD environments.
Experience supporting U.S. Government contracts in roles such as Information Assurance Engineer, ISSO, or cybersecurity SME.
Security related network or operating system certifications or training (e.g., Cisco, Microsoft, Red Hat).
DoDI 8570.01 IAT/IAM/IASAE Level III compliant certification preferred; candidates not yet certified may be expected to obtain a qualifying credential within 12 months of hire.
Experience serving as a Scrum Master or Agile facilitator, including leading ceremonies, maintaining team level metrics, and driving continuous improvement.
Experience as a Scrum Practitioner contributing to backlog refinement, user story development, task decomposition, and delivery of high-quality cyber documentation or security artifacts.
Ability to work independently as a self-starter with minimal supervision while coordinating effectively across cross-functional teams.

Compensation: USD 86,800 - 165,200 per year. Location: Tewksbury, MA, United States of America (onsite).

View full job page →

1mo ago

Cyber Security Engineer SME

Govcio LLC Peterson AFB, CO

Peterson AFB, CO

1mo ago Closed

$160k - $200k/yr Full time Cyber Threat Analysis Cybersecurity Tools Dod Rmf

This position is no longer accepting applications (closed Sep 23, 2026).

Job Description

Onsite at Peterson AFB, CO, this SME role supports AF IC Risk Management Framework (RMF) modernization for classified information systems.

Responsibilities

Correlate threat data from multiple sources to identify hackers’ identity and modus operandi within client networks.
Produce assessments and reporting that improve situational awareness and understanding of current cyber threats and adversaries.
Develop cyber threat profiles by geographic region, country, group, or individual actor.
Create cyber threat assessments using entity threat analysis.
Provide computer forensic and intrusion support for high-technology investigations, including evidence seizure, forensic analysis, data recovery, and network assessments.
Maintain proficiency in tools, techniques, countermeasures, and trends for computer network vulnerabilities, data hiding, and network security and encryption.
Collaborate with intrusion analysts to identify, report on, and coordinate remediation of cyber threats.
Deliver timely, actionable sanitized intelligence to cyber incident response professionals.
Use knowledge of computer systems and networks plus threat information to assess the client’s security posture.
Conduct intelligence analysis to evaluate intrusion signatures and tactics, techniques, and procedures for cyber attack preparation and execution.
Research threat actors, techniques, vulnerabilities, and exploits; brief leadership and provide detailed intelligence reports.
Engineer cybersecurity solutions for DoD and Intelligence Community information systems.
Design, implement, and document security controls aligned with NIST SP 800-53 Rev. 5 and CNSSI 1253 overlays, as applicable.
Design security architectures for Zero Trust, cloud, hybrid, and on-premises environments.
Integrate cybersecurity requirements throughout the SDLC.
Support Authority to Operate (ATO), Continuous Authorization (cATO), and Continuous Monitoring (ConMon).
Develop and maintain RMF authorization artifacts.
Engineer automated evidence collection and validation processes.
Develop reusable security control implementations and standardized control inheritance strategies.
Support OSCAL-based RMF automation.
Design and implement AI-assisted capabilities for RMF documentation, evidence management, and compliance analysis.
Develop Retrieval-Augmented Generation (RAG) workflows for cybersecurity documentation.
Apply NLP techniques to analyze RMF artifacts and identify documentation inconsistencies.
Develop machine learning and rule-based models.
Implement human-in-the-loop validation for all AI-generated outputs.
Apply Responsible AI principles and AI governance during solution development.
Develop automated RMF workflows and integrate cybersecurity controls into CI/CD pipelines.
Implement Security-as-Code and Policy-as-Code capabilities.
Create dashboards for cybersecurity metrics, authorization status, and continuous monitoring.
Integrate automation with eMASS, Xacta, ServiceNow, vulnerability management platforms, and enterprise asset inventories.
Engineer automated cybersecurity evidence collection supporting continuous monitoring and integrate security tooling.
Develop automated compliance scoring and risk dashboards.
Provide technical recommendations supporting authorization decisions.
Support modernization of enterprise RMF processes across AF IC environments.
Support system owners, ISSMs, ISSOs, Authorizing Officials (AOs), and Security Control Assessors (SCAs) by developing automation capabilities and engineering solutions.
Note: This position does not perform independent security control assessments to preserve RMF assessment independence.

Requirements

Clearance: Top Secret/SCI
DoD 8140 IAT III certification required: CISSP, ISSEP, ISSAP, or CGRC
Experience: 10 years in one or more of: Cybersecurity Engineering, RMF implementation, Security Architecture, DevSecOps, Continuous Monitoring, Security Automation
Minimum DoD/IC experience: 5 years supporting DoD or Intelligence Community cybersecurity programs
RMF and environment experience: eMASS, Xacta, NIST RMF, DoD RMF, AF IC cybersecurity processes, and classified information systems
Frameworks and standards experience: NIST SP 800-37 Rev. 2, NIST SP 800-53 Rev. 5, NIST SP 800-53A Rev. 5, NIST SP 800-137, NIST SP 800-30, FIPS 199 and 200, DoD RMF, CNSSI, ICD 50, OSCAL implementation and machine-readable RMF artifacts, Zero Trust Architecture, cATO, security engineering principles, DevSecOps, and security automation
Programming for automation: Python, PowerShell, REST APIs, JSON/XML, GIT, CI/CD Platforms, plus integration with enterprise APIs and cybersecurity platforms
AI-assisted cybersecurity experience: Large Language Models (LLMs), RAG, NLP, prompt engineering, vector databases, document intelligence, AI governance, and human-in-the-loop validation
Education/qualification: High School with 10+ years (or commensurate experience)

Preferred Skills

Experience with the Space Force’s network environment

Technologies

CISSP, ISSEP, ISSAP, CGRC
NIST SP 800-53 Rev. 5, CNSSI 1253
Zero Trust Architecture, SDLC, OSCAL
eMASS, Xacta, ServiceNow, vulnerability management platforms, enterprise asset inventories
NIST SP 800-37 Rev. 2, NIST SP 800-53A Rev. 5, NIST SP 800-137, NIST SP 800-30
FIPS 199, FIPS 200
DoD RMF, ICD 50
Python, PowerShell, REST APIs, JSON/XML, GIT, CI/CD Platforms
Large Language Models (LLMs), RAG, NLP, prompt engineering, vector databases, document intelligence

Position Details

Location: Peterson AFB, CO (onsite)
Salary range: USD 160,000 - 200,000 per year

View full job page →

Dod Rmf Engineer Jobs

Senior Cybersecurity RMF Engineer

Cybersecurity Engineer - DoD RMF & Authorization

Senior Cybersecurity Engineer

Cyber Security Engineer SME

Get Dod Rmf Engineer Jobs alerts