Cybersecurity Compliance Engineer (15.25)

OCT Consulting, LLC; Bellevue (WA); On-site; USD 40,000 - 400,000; Full time

Job summary

An established industry player is seeking a Cybersecurity Compliance Engineer to enhance the security posture of critical systems for a federal client. This role involves conducting technical assessments, developing essential RMF artifacts, and collaborating with stakeholders to ensure compliance with stringent security standards. The ideal candidate will have extensive experience with DoD RMF and a strong grasp of NIST guidelines. Join a dynamic team committed to delivering top-notch cybersecurity solutions while enjoying competitive benefits and opportunities for professional growth.

Benefits

Medical, Dental, and Vision insurance

401K retirement plan with employer contributions

Paid Time Off

Life Insurance

Short- and Long-Term disability benefits

Training Benefits

Qualifications

• 5+ years of experience with DoD RMF and federal cybersecurity assessments.
• Strong knowledge of NIST SP 800-53 and vulnerability management tools.

Responsibilities

• Conduct technical security assessments and support ISSMs and AOs.
• Lead planning and execution of Cyber Operational Readiness Assessments.

Skills

DoD RMF

FISMA compliance

NIST SP 800-53

vulnerability management

communication skills

Education

Bachelor’s degree in Cybersecurity

Bachelor’s degree in Computer Science

Tools

CSAM

DISA STIGs

ACAS

Job description

Cybersecurity Compliance Engineer (15.25)

OCT Consulting is a business management and technology consulting firm that provides support to Federal Government clients. We provide consulting services in the areas of Strategy, Process Improvement, Change Management, Program and Project Management, Acquisition/Procurement, and Information Technology.

Responsibilities and Duties

OCT currently has an opening for a Cybersecurity Compliance Engineer/Analyst to support our federal client - United States Air Force's 557th Weather Wing (557 WW) in advancing the security posture of classified and unclassified systems. The candidate will conduct technical security assessments and support Government Information Systems Security Managers (ISSMs) and Authorizing Officials (AOs). This role provides hands-on execution of Security Test & Evaluation (ST&E) activities, vulnerability analysis, and development of RMF artifacts including SSPs, SARs, POA&Ms, and RARs, while maintaining documentation in tools such as CSAM and participating in risk-based authorization efforts. This position is contingent on contract award.

Day to day responsibilities include:

● Lead the planning, execution, and documentation of Cyber Operational Readiness Assessments (CORA) for assigned systems in accordance with DoD RMF, Air Force, and NIST SP 800-53 guidance.

● Conduct STIG-based control assessments, vulnerability scans, and technical configuration reviews to determine system compliance with security baselines.

● Develop and maintain core RMF artifacts, including System Security Plans (SSPs), Risk Assessment Reports (RARs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), etc.

● Utilize Cyber Security Assessment and Management (CSAM) tools or equivalent to manage documentation workflows, compliance tracking, and assessment scheduling.

● Collaborate closely with ISSOs, system owners, and mission stakeholders to ensure readiness for annual assessments, revalidations, and continuous monitoring.

● Support briefings to 557WW leadership, translating technical findings into actionable remediation plans.

Qualifications/Requirements

● Must be a U.S. Citizen

● Must hold an active DoD Secret or above clearance.

● Must be able to work on-site at Offutt AFB (5 days/week minimum).

● Bachelor’s degree in Cybersecurity, Computer Science, or a related discipline.

● 5+ years of hands-on experience with DoD RMF, FISMA compliance, and federal cybersecurity assessments.

● Strong working knowledge of NIST SP 800-53, 800-53A Rev.5, and 800-115.

● Proficiency in DISA STIGs, vulnerability management tools (e.g., ACAS), and compliance platforms such as CSAM or Xacta.

● DoD 8570.01-M IAT Level II or IAM Level I compliant certification (e.g., Security+, CISSP, CISM, or equivalent).

● Strong organizational and communication skills, with the ability to work in a fast-paced, mission-driven environment.

Benefits

OCT offers competitive compensation packages and a full suite of benefits which includes:

● Medical, Dental, and Vision insurance

● Retirement savings 401K plan provided by an industry leading provider with 3% employer contributions of the employee’s gross salary

● Paid Time Off and Standard Government Holidays

● Life Insurance, Short- and Long-Term disability benefits

● Training Benefits

Salary Range: $40,000- $400,000 yearly commensurate with experience, education, etc.

About OCT Consulting

OCT Consulting LLC is a minority-owned, SmallDisadvantaged Business (SDB) providing professional services and information technology solutions to the Federal government and commercial clients. Founded in 2013, we bring the advantage of agility in operations along with a management team with a track record of leading successful engagements at major Federal government agencies.

At OCT, we are committed to ensuring equal opportunity for all individuals, recognizing that merit and qualifications are the foundation of our hiring, promotion, and development practices. We believe in creating a work environment where employees can thrive based on their abilities, skills, and achievements. Our practices ensure fair treatment and equal access to opportunities for all, regardless of race, ethnicity, gender, sexual orientation, age, abilities, or other personal characteristics. We are dedicated to providing career growth and professional development based on individual merit and fostering a workplace where everyone’s contributions are valued and recognized.