Dod Rmf

Dod Rmf Cybersecurity Jobs

3 jobs found

Today

Cybersecurity Engineer - DoD RMF & Authorization

Fuse Integration San Diego, CA

San Diego, CA

Today

$120k - $160k/yr Full time Ato/iatt Cybersecurity Tools Dod Rmf

Apply Now

Job Description

Fuse Integration is seeking a Cybersecurity Engineer to lead DoD RMF execution and build/manage authorization packages for secure communications networks supporting U.S. defense agencies.

Responsibilities

Lead and support execution of the Department of Defense (DoD) Risk Management Framework (RMF) across development, testing, authorization, and operational lifecycles.
Develop, maintain, and manage complete RMF authorization packages supporting Authorizations to Operate (ATOs), Interim Authorizations to Test (IATTs), and ongoing authorization activities.
Prepare and maintain System Security Plans (SSPs), security control implementation statements, Plans of Action and Milestones (POA&Ms), hardware and software inventories, system architecture documentation, and other required RMF artifacts.
Manage RMF authorization packages within Enterprise Mission Assurance Support Service (eMASS), ensuring security control documentation, assessment evidence, and supporting artifacts remain accurate, complete, and current.
Analyze and document security control implementations aligned to NIST SP 800-53, DoDI 8510.01, CNSSI 1253, applicable DISA Security Technical Implementation Guides (STIGs), and DoD cybersecurity policies.
Coordinate with ISSMs, ISSOs, SCAs, Authorizing Officials (AOs), and government representatives to support assessments and authorization decisions.
Evaluate system architectures, configurations, and operational environments to determine security control applicability, implementation approaches, and compliance requirements.
Review and interpret vulnerability assessment results from ACAS, Nessus, SCAP, and STIG compliance assessments to identify deficiencies, document risks, and recommend remediation.
Develop, maintain, and track POA&Ms, coordinating with engineering teams to resolve vulnerabilities, document mitigating factors, and support risk acceptance decisions.
Support Security Control Assessment (SCA) activities by preparing assessment evidence, responding to findings, coordinating technical demonstrations, and resolving documentation gaps.
Develop and execute continuous monitoring activities to maintain cybersecurity posture and authorization status of assigned information systems.
Assess proposed modifications, software updates, and configuration changes to determine security control impacts, authorization boundary effects, and ATO/IATT condition changes.
Partner with systems, software, and network engineers to ensure cybersecurity requirements are incorporated into system design, development, integration, and testing.
Provide technical guidance on secure configurations, operating system hardening, network security, virtualization, and vulnerability remediation to support DoD cybersecurity requirements.

Requirements

6–8 years of professional experience in DoD cybersecurity, information assurance, systems administration, network engineering, or related technical disciplines.
Demonstrated experience supporting DoD RMF authorization activities, including development and maintenance of ATO and/or IATT packages.
Hands-on experience creating and maintaining RMF documentation, including SSPs, security control implementation statements, POA&Ms, and supporting assessment artifacts.
Experience using eMASS to document security controls, manage authorization artifacts, track assessment findings, and maintain RMF packages.
Strong working knowledge of NIST SP 800-53, DoD RMF requirements, and security control implementation and assessment methodologies.
Experience interpreting DISA STIG requirements, vulnerability assessment results, and system security configurations to determine compliance and develop remediation recommendations.
Experience reviewing system configurations, network architectures, and security control implementations to support accurate RMF documentation.
Working knowledge of Linux and Windows, including administration, security hardening, access controls, and configuration management.
Familiarity with virtualized environments such as VMware, KVM, or Hyper-V and related cybersecurity considerations.
Understanding of networking fundamentals including TCP/IP, VLANs, subnets, firewalls, routing, network segmentation, and secure communications.
Ability to analyze cybersecurity findings, document technical risks, and communicate remediation requirements to engineering teams and government stakeholders.
Strong technical writing skills for clear, accurate, and technically defensible security documentation.
Ability to independently manage multiple RMF deliverables, coordinate across engineering disciplines, and meet program authorization milestones.
Ability to meet applicable DoD 8140 cybersecurity workforce qualification requirements for the assigned work role.
U.S. citizenship.
Active Secret security clearance.

Technologies

Linux, Windows
VMware, KVM, Hyper-V
eMASS
ACAS, Nessus, SCAP
STIGs
TCP/IP, VLANs, firewalls
POA&Ms, System Security Plans (SSPs)
NIST SP 800-53
DoDI 8510.01
CNSSI 1253
DISA Security Technical Implementation Guides (STIGs)
DoD RMF, DoD 8140

Benefits

Medical, Dental, and Vision
Employee coverage is fully funded; a portion of dependents' coverage is funded as well
11 paid Federal Holidays
Paid Time Off (PTO)
40 hours of paid sick leave per year
401k with employer matching
Annual bonuses
Cell phone reimbursement: $100/month

Preferred Qualifications

Experience independently managing DoD RMF authorization packages from initial system categorization through authorization and continuous monitoring.
Experience supporting successful ATO/IATT submissions, security assessments, and authorization package reviews.
Familiarity with Navy, Marine Corps, or Air Force RMF authorization processes and service-specific requirements.
Experience supporting cybersecurity accreditation of Research, Development, Test, and Evaluation (RDT&E) systems, developmental systems, or operational DoD capabilities.
Experience coordinating directly with SCAs, AOs, government ISSMs, and other authorization stakeholders.
Experience performing security control inheritance analysis, developing system authorization boundaries, and identifying applicable overlays and control tailoring requirements.
Experience using ACAS, Nessus, SCAP, STIG Viewer, and other vulnerability assessment or compliance tools.
Experience with technical implementation of DISA STIGs and security hardening of Linux, Windows, networking equipment, and virtualized environments.
Familiarity with DoDI 8510.01, NIST SP 800-37, CNSSI 1253, and applicable DoD continuous monitoring guidance.
Knowledge of Navy C4ISR systems, military networks, or tactical data links.
Experience supporting cybersecurity requirements within Agile software development or systems engineering environments.
Experience assessing cybersecurity risks associated with custom software, specialized hardware, or mission-specific system architectures.

Location: San Diego, CA (onsite)

Salary: USD 120,000 - 160,000 per yearly

Clearance: Active Secret

View full job page →

18d ago

Senior Cybersecurity Engineer

Raytheon Tewksbury, MA

Tewksbury, MA

18d ago

$87k - $165k/yr Full time Senior Cybersecurity Tools Data Security

Apply Now

Job Description

Onsite in Tewksbury, MA, this Senior Cybersecurity Engineer role supports complex DoD systems by defining cybersecurity requirements and ensuring compliance through RMF/ATO documentation and evidence-ready architecture. If you value structured delivery, collaboration across engineering teams, and measurable progress through Agile, you will have a clear path to contribute technical security expertise while partnering with program stakeholders to align work with priorities.

What you’ll do

Define system-level cybersecurity requirements and architect secure solutions across complex DoD environments.
Analyze security data, test results, and assessment findings to identify risk, guide remediation, and validate outcomes.
Prepare, maintain, and improve RMF/ATO documentation and other required cybersecurity compliance artifacts.
Create cybersecurity architecture artifacts, strategies, implementation plans, and security policies that support secure integration.
Lead or guide vulnerability assessments, A&A activities, and remediation validation.
Collaborate with engineering and program teams to evaluate cybersecurity design alternatives and integrate security considerations into system design.
Perform internal cybersecurity audits to verify control implementation and compliance.
Support the development and testing of security controls across networks, databases, operating systems, applications, and hardware/software components.
Champion Agile practices and serve as the team’s Scrum Master, facilitating ceremonies, removing impediments, and enabling predictable, iterative delivery.
Maintain team-level Agile metrics, support backlog refinement, and work with the Product Owner to keep security work clearly defined and aligned with CDRL and program priorities. Deliver high-quality cybersecurity documentation, technical evidence, vulnerability responses, and security artifacts each sprint.

Required qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or a related technical field, plus 5+ years of relevant experience.
Strong understanding of cybersecurity principles and compliance requirements, including the DoD Risk Management Framework (RMF) as defined in NIST SP 800-37.
Active and transferable U.S. government security clearance required on day one; U.S. Citizenship is required.
Experience applying security controls, hardening standards, and vulnerability mitigation across operating systems, aligned to NSA (FIPS), NIST (SP 800), DISA STIGs, and USCYBERCOM.
Hands-on experience with network and system security administration, including secure configuration and account management for Windows, Red Hat Enterprise Linux, and common network platforms (such as Cisco).
Familiarity with vulnerability scanning tools (Nessus, OpenVAS, SCC) and the ability to interpret and apply results to remediation actions.
Proficiency working with cybersecurity documentation, configuration files, and scripting or automation for evidence collection.
Experience as a Scrum Master or Agile facilitator, including leading ceremonies, maintaining team metrics, removing impediments, and supporting iterative delivery.
Hands-on experience as a Scrum Practitioner by writing/refining user stories, estimating security tasks, and delivering high-quality cybersecurity documentation and artifacts each sprint.
Ability to collaborate closely with Product Owners, engineering teams, and stakeholders to maintain backlog clarity, prioritize work, and integrate security tasks into Agile planning cycles.

Preferred qualifications

Familiarity with DoDI 8510.01 and its direction of RMF and ATO activities in DoD environments.
Experience supporting U.S. Government contracts in roles such as Information Assurance Engineer, ISSO, or cybersecurity SME.
Security-related network or operating system certifications or training (examples include Cisco, Microsoft, Red Hat).
DoDI 8570.01 IAT/IAM/IASAE Level III compliant certification preferred; candidates not yet certified may be expected to obtain a qualifying credential within 12 months of hire.
Experience serving as a Scrum Master or Agile facilitator, driving continuous improvement.
Experience as a Scrum Practitioner contributing to backlog refinement, user story development, task decomposition, and delivery of high-quality cyber documentation or security artifacts.
Ability to work independently with minimal supervision while coordinating across cross-functional teams.

Security clearance

DoD Clearance: Secret
Status requirement: Ability to obtain INTERIM U.S. government issued security clearance prior to start date is required.
Citizenship: U.S. citizenship is required because only U.S. citizens are eligible for a security clearance.

Compensation and benefits

Salary range: USD 86,800 - 165,200 per year.

Medical, dental, and vision
Life insurance
Short-term disability and long-term disability
401(k) match
Flexible spending accounts
Flexible work schedules
Employee assistance program
Employee Scholar Program
Parental leave
Paid time off
Holidays

View full job page →

1mo ago

Cyber Security Engineer SME

Govcio LLC Peterson AFB, CO

Peterson AFB, CO

1mo ago Closed

$160k - $200k/yr Full time Cyber Threat Analysis Cybersecurity Tools Dod Rmf

This position is no longer accepting applications (closed Sep 23, 2026).

Job Description

GovCIO LLC is hiring a Cybersecurity Engineer SME to help modernize Air Force Intelligence Community (AF IC) Risk Management Framework (RMF) processes. This onsite role at Peterson AFB, CO focuses on engineering and automating RMF capabilities, improving authorization efficiency, and enhancing continuous monitoring to support classified information systems.

In this position, you will serve as a technical lead for cybersecurity engineering, RMF automation, and AI-enabled compliance capabilities that support system owners, ISSMs, ISSOs, Authorizing Officials (AOs), and Security Control Assessors (SCAs).

What You Will Do

Correlate threat data from multiple sources to establish the identity and modus operandi of hackers operating in client networks.
Provide assessments and reports that improve situational awareness and help teams understand current cyber threats and adversaries.
Develop cyber threat profiles by geographic region, country, group, or individual actor.
Produce cyber threat assessments based on entity threat analysis.
Support high technology investigations with computer forensics and intrusion support, including evidence seizure, forensic analysis, data recovery, and network assessments.
Research and maintain proficiency in tools, techniques, countermeasures, and trends related to computer network vulnerabilities, data hiding, and security and encryption.
Collaborate with intrusion analysts to identify, report, and coordinate remediation of cyber threats.
Deliver timely, actionable sanitized intelligence to cyber incident response professionals.
Use knowledge of computer systems and networks, combined with threat information, to assess the client’s security posture.
Conduct intelligence analysis to assess intrusion signatures and tactics, techniques, and procedures associated with cyber attack preparation and execution.
Research threat actors and techniques, and brief leadership with detailed intelligence reports.
Engineer cybersecurity solutions supporting DoD and Intelligence Community information systems.
Design, implement, and document security controls aligned with NIST SP 800-53 Rev. 5 and CNSSI 1253 overlays, as applicable.
Support security architectures for Zero Trust, cloud, hybrid, and on-premises environments, and integrate cybersecurity requirements throughout the SDLC.
Support ATO, cATO, and ConMon initiatives, including development and maintenance of RMF authorization artifacts.
Engineer automated evidence collection and validation, reusable control implementations, and standardized control inheritance strategies.
Support OSCAL-based RMF automation and design AI-assisted capabilities for RMF documentation, evidence management, and compliance analysis.
Develop RAG workflows for cybersecurity documentation and apply NLP to analyze RMF artifacts and identify documentation inconsistencies.
Develop machine learning and rule-based models, and implement human-in-the-loop validation for all AI-generated outputs, applying Responsible AI principles and AI governance.
Build automated RMF workflows, integrate cybersecurity controls into CI/CD pipelines, and implement Security-as-Code and Policy-as-Code.
Create dashboards for cybersecurity metrics, authorization status, and continuous monitoring.
Integrate automation with eMASS, Xacta, ServiceNow, and Vuln Management platforms, plus enterprise asset inventories.
Engineer automated collection of cybersecurity evidence supporting continuous monitoring and integrate security tooling.
Develop automated compliance scoring and risk dashboards and provide technical recommendations supporting authorization decisions.
Support modernization of enterprise RMF processes across AF IC environments.

Note: This position supports engineering and automating RMF processes to improve authorization efficiency. It does not perform independent security control assessments to preserve RMF assessment independence.

Required Qualifications

Clearance Required: Top Secret/SCI
DoD 8140 IAT III: Certification required: CISSP, ISSEP, ISSAP, or CGRC
Minimum experience: 5 years supporting DoD or Intelligence Community cybersecurity programs
Experience with eMASS, Xacta, NIST RMF, DoD RMF, AF IC cybersecurity processes, and classified information systems
Demonstrated experience with NIST SP 800-37 Rev. 2, NIST SP 800-53 Rev. 5, NIST SP 800-53A Rev. 5, NIST SP 800-137, NIST SP 800-30, FIPS 199 and FIPS 200, DoD RMF, CNSSI, ICD 50, OSCAL implementation and machine-readable RMF artifacts, Zero Trust architecture, cATO, security engineering principles, DevSecOps, and security automation
Programming experience developing automation using: Python, PowerShell, REST APIs, JSON/XML, GIT, CI/CD platforms, and integrating with enterprise APIs and cybersecurity platforms
AI-assisted cybersecurity experience using LLMs, RAG, NLP, prompt engineering, vector databases, document intelligence, AI governance, and human-in-the-loop validation

Preferred Qualifications

Experience with the Space Force’s network environment

Location and Salary

Location: Peterson AFB, CO (onsite)
Salary Range: USD 160,000 - 200,000 per year

View full job page →

Dod Rmf Cybersecurity Jobs

Cybersecurity Engineer - DoD RMF & Authorization

Senior Cybersecurity Engineer

Cyber Security Engineer SME

Get Dod Rmf Cybersecurity Jobs alerts