Cybersecurity and RMF Engineer, Mid

Booz Allen Hamilton; Arlington (VA); On-site; USD 69,400 - 158,000; Full time

Job summary

Phase2 Technology is seeking a Mid Cybersecurity and RMF Engineer in Arlington, Virginia. The role entails developing security solutions for the US Air Force, overseeing vulnerability assessments, and managing cybersecurity controls. Candidates must have 8+ years of experience with RMF and related frameworks, Secret clearance, and the ability to lead cross-functional teams.

Compensation ranges from $69,400 to $158,000 annually, reflecting the candidate's expertise and experience.

Qualifications

• 8+ years of experience with RMF, NIST 800‑53, Zero Trust.
• 5+ years of experience as ISSO, ISSE, or ISSM.
• 2+ years in DevSecOps pipeline security tools.
• Secret clearance is required.

Responsibilities

• Manage infrastructure and cyber security controls.
• Lead risk and vulnerability assessments.
• Develop relationships with teams and senior management.

Skills

RMF

NIST 800‑53

Zero Trust

vulnerability management

DevSecOps pipeline security

cybersecurity engineering

Secret clearance

Education

HS diploma or GED

Tools

AWS

Microsoft Azure

Google Cloud Service

Job description

Job Number: R0240573

Cybersecurity and RMF Engineer, Mid

The Opportunity

Are you looking for an opportunity to share your experience in cyber security and systems engineering that will support the US Air Force? As a systems security and network security engineer, you can identify the tools needed to assess vulnerabilities and recommend the best solution and security strategy. We need your experience to oversee the development and implementation of security solutions that will protect our military.

On our team, you'll supervise a team as they troubleshoot and analyze complex challenges for customers using your knowledge of network and security devices, applications, and identifying tools. You'll manage the research of technology and market trends to further develop security solutions. Using your expertise in Low Code/No Code systems and security protocols, you'll assess security threats and implement infrastructure controls.

In this role, you'll directly impact Air Force human capital management by helping to secure our nation's human capital systems. With mentoring, challenging hands‑on problem‑solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers.

Work with us as we secure and protect the Air Force for the better.

What You'll Work On

• Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management.
• Manage infrastructure and cyber security controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises.
• Lead risk and vulnerability assessments in network, system, and application areas; leverage big data analytics and traditional security event types to identify advanced threats.

Join us. The world can't wait.

You Have

• 8+ years of experience with RMF, NIST 800‑53, Zero Trust, STIGs, vulnerability management, ATO packages, POA&Ms, continuous monitoring, or secure cloud.
• 5+ years of experience as an Information Systems Security Officer (ISSO), Information Systems Security Engineer (ISSE), or Information Systems Security Manager (ISSM).
• 2+ years of experience setting‑up or working with DevSecOps pipeline security tools, scanning, and reporting.
• 2+ years of experience with supporting and helping configure in a DevOps team.
• Experience in cybersecurity engineering and RMF alignment for the solution, supporting secure architecture, controls implementation, scanning, evidence generation, POA&Ms tracking, and continuous monitoring in IL5‑ready environments with scalability to higher controls.
• Ability to work with development teams to select the most suitable controls.
• Secret clearance.
• HS diploma or GED.

Nice If You Have

• Experience with developing SSP or ATO packages for systems deployed in a Microsoft Azure, AWS, or DoD Cloud environment.
• Bachelor's degree.
• Amazon Web Service (AWS), Microsoft Azure, or Google Cloud Service Provider Certification.
• DoD 8570 IAM II or higher Certification, such as SecurityX, CISM, or CISSP Certification.
• DoD Directive 8570.01‑M for IASAE Level III Certification, such as CISSP‑ISSAP, CISSP‑ISSEP, or CCSP Certification.

Clearance

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Secret clearance is required.

Compensation

Compensation: $69,400.00 to $158,000.00 (annualized USD). This posting will close within 90 days from the Posting Date.

Commitment to Non‑Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.