Cybersecurity Engineer, Lead

What you'll do

• Manage RMF lifecycle activities and maintain authorization packages for DoD information systems.
• Maintain system security documentation including SSPs, ConMon Plans, IRPs, and control narratives.
• Perform eMASS package administration and quality assurance to ensure accurate cybersecurity posture records.
• Coordinate monthly POA&M updates, evidence validation, and the tracking of remediation activities.
• Translate NIST SP 800-53 requirements into specific system implementation statements and technical evidence.
• Conduct Security Impact Assessments for proposed system changes and manage interconnection agreements like ISAs and MOUs.
• Analyze network traffic, protocols, and data sensitivity to identify required security artifacts and firewall actions.
• Validate STIG and ACAS findings to determine risk acceptances, mitigations, and remediation requirements.

What we're looking for

• 8+ years of experience with DoD RMF or cybersecurity.
• Experience using eMASS to manage security controls, POA&Ms, and artifacts like STIG checklists or ACAS scans.
• Experience administering Windows, Linux, AWS Cloud, and containerization systems.
• Knowledge of NIST SP 800-37, NIST SP 800-53 Rev. 5, DoDI 8510.01, and DoD authorization practices.
• Knowledge of TCP/IP, firewalls, PKI, encryption, identity and access management, and DoD network security concepts.
• Ability to validate STIG and vulnerability findings using ACAS, Nessus, SCAP, and other manual procedures.
• Bachelor's degree in a technical field and a DoD 8570 or 8140-aligned certification (Security+, CISSP, or CASP+).
• TS/SCI clearance.