Senior RMF Security Engineer

Leidos

Confirmed live yesterday High trust

Quick summary

Work type
On-site
Location
San Diego, CA
Salary
$131,300–$237,350 / yr
Posted
52 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $180k
This role $184k
$119k most similar roles pay here $250k

This role pays more than 58% of similar roles. Most pay $151,475–$208,800 — the shaded band above. At the midpoint, this role pays about $184k versus about $180k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 264 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 245 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Senior RMF Security Engineer

Sr. RMF Security Engineer joins the Intelligence Group Cyber & Analytics Business Area to ensure information systems comply with federal cybersecurity standards within the Department of Defense community. This role involves guiding projects through the Risk Management Framework lifecycle, including categorizing systems based on risk, implementing security controls per NIST SP 800-53 or DoD requirements, and performing continuous monitoring to address vulnerabilities. The engineer serves as a technical advisor, conducting risk assessments, analyzing security test results, and recommending mitigation strategies via configuration changes or tool updates. Key technologies include eMASS, SCAP tools like Nessus and Tenable.sc, SAST/DAST tools, and STIG compliance. Preferred skills include Python, JavaScript, Bash, or Rust for automation, as well as experience with Zero Trust Architecture, CMMC 2.0, COMSEC, and SIEM tools such as Splunk to secure critical defense infrastructure.

What you'll do

  • Guide projects through the full RMF lifecycle including categorization and security control selection.
  • Implement and assess security controls based on NIST SP 800-53 and DoD requirements.
  • Perform continuous monitoring to identify vulnerabilities and address compliance gaps.
  • Conduct risk assessments and analyze security test results to recommend mitigation strategies.
  • Prepare critical documentation including System Security Plans, Security Assessment Reports, and POA&Ms.
  • Ensure system compliance with DISA STIGs and SCAP benchmarks.
  • Identify and verify structural flaws and runtime misconfigurations using SAST and DAST tools.
  • Act as a technical advisor to bridge the gap between cybersecurity policy and system implementation.

What we're looking for

  • Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or a related field.
  • 12 years of experience with a Bachelor's degree or 10 years of experience with a Master's degree.
  • U.S. citizenship and an active Secret DoD security clearance.
  • DoD 8570 approved security certification (e.g., Security+).
  • Deep knowledge of NIST SP 800-37, 800-53, 800-171, FedRAMP, and DoD Instruction 8510.01.
  • Experience preparing System Security Plans (SSP), Security Assessment Reports (SAR), and Plan of Action & Milestones (POA&M).
  • Proficiency with eMASS, SCAP tools (Nessus, Tenable.sc, OpenSCAP), and STIG compliance.
  • Ability to identify vulnerabilities in codebases using SAST and DAST tools.

More like this

Similar roles

Cybersecurity and RMF Engineer, Mid

Booz Allen Hamilton

Arlington, VA 38 days ago $69,400$158,000
RMF NIST 800-53 Zero Trust STIGs Vulnerability Management ATO POA&M Continuous Monitoring DevSecOps AWS Microsoft Azure Big Data Analytics Cybersecurity Engineering Information Systems Security

Cybersecurity and RMF Engineer, Mid

Booz Allen Hamilton

Arlington, VA 6 days ago $69,400$158,000
RMF NIST 800-53 Zero Trust STIGs Vulnerability Management ATO POA&M Continuous Monitoring DevSecOps AWS Microsoft Azure Big Data Analytics Cybersecurity Engineering Network Security

RMF Cybersecurity Engineer

Booz Allen Hamilton

Fort Meade, MD 49 days ago $99,000$225,000
Risk Management Framework NIST 800-53 eMASS ACAS Cybersecurity Vulnerability Assessment System Administration Network Security Big Data Analytics Security+ CySA+ SSCP GSEC CND CICSP Information System Security Officer

Senior WAF Security Engineer

Warner Bros. Discovery

Atlanta, GA +2 24 days ago $105,280$195,520
WAF DDoS Mitigation AWS Azure GCP Cloudflare Akamai Fastly NGWAF Python Bash PowerShell BOTO3 Terraform CloudFormation CI/CD Infrastructure as Code HTTP/S OWASP Top 10 API Security Log Analysis
5+ yrs exp Hybrid

Senior Security Engineer

CoStar Group

Arlington, VA +1 74 days ago $115,000$203,000
AWS SaaS Security AI Security NGFW CASB SSE Python PowerShell Terraform Azure DevOps infrastructure-as-code SSO OAuth Network Security Threat Modeling Routing
5+ yrs exp

Senior Security Engineer

Adobe

Lehi, UT +2 91 days ago $180,600$261,450
Entra ID Okta SailPoint Zero Trust RBAC ABAC M365 Slack GitHub Workday Google Teleport Vault CI/CD Python PowerShell Terraform SPIFFE SPIRE
5+ yrs exp