Cyber Defense Engineer II — DoD RMF & STIG Specialist

M.c.-Dean,-Inc.; Charleston (SC); On-site; USD 90,000 - 130,000; Full time

Job summary

M.C. Dean in the United States is seeking a cybersecurity engineer to coordinate and implement DoD RMF controls across IT and OT environments, supporting government customers and vendors. The role emphasizes applying STIGs, vulnerability management, and documentation for RMF assessment.

Candidates should have DoD RMF experience, knowledge of NIST 800-53, ACAS, and action on POA&M. An active IAT Level II certificate is required, with strong communication and teamwork to advance cybersecurity

Qualifications

• Must have 0+ years with a Master's in Information Technology, Risk Management, or Cybersecurity.
• Experience with DoD RMF lifecycle, STIGs, and security controls.
• Proficient in vulnerability management and documentation for RMF.

Responsibilities

• Working closely with team members, vendors, and government customers.
• Implementing DoD STIGs on IT and OT systems per guidance.
• Assisting in RMF assessment documentation and authorization processes.
• Conducting IC/SCADA inventories following DoD guidance.
• Performing vulnerability scanning and documenting findings.
• Supporting ISO standardization and quality inspections.
• Contributing to continuous improvement of cybersecurity posture.

Skills

Team coordination

DoD RMF

NIST 800-53

ACAS

HBSS

POA&M management

Documentation

Communication

Education

Master's in IT/Risk/Cybersecurity

Bachelor's in IT/Risk/Cybersecurity

Associate's in IT/Risk/Cybersecurity

High School Diploma

Tools

ACAS

HBSS

Job description

M.C. Dean in the United States is seeking a cybersecurity engineer to coordinate and implement DoD RMF controls across IT and OT environments, supporting government customers and vendors. The role emphasizes applying STIGs, vulnerability management, and documentation for RMF assessment.

Candidates should have DoD RMF experience, knowledge of NIST 800-53, ACAS, and action on POA&M. An active IAT Level II certificate is required, with strong communication and teamwork to advance cybersecurity