DoD Cyber RMF Engineer | DevSecOps & Compliance

Integral Federal, Inc.; Fort Meade, Northern (MD, KY); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Integral Federal, Inc. seeks a Cybersecurity/RMF Engineer to provide hands-on security and RMF support for the JPES/JCRM Agile/DevSecOps team.

You will partner with developers, cloud/infrastructure engineers, testers, and the IA Lead to identify, remediate, validate, and document security findings throughout the software lifecycle. The role requires DoD RMF and NIST 800-53 experience, STIG and vulnerability-assessment skills, and strong collaboration with cross-functional teams.

Qualifications

• BA/BS in an engineering discipline or equivalent experience.
• 4+ years cybersecurity/RMF experience.
• DoD RMF and NIST 800-53 experience.
• STIG and vulnerability-assessment experience.
• POA&M and security-evidence experience.
• Ability to collaborate with developers, DevSecOps engineers, and system admins.
• U.S. citizenship and required Secret eligibility.

Responsibilities

• Support RMF and continuous-monitoring activities.
• Perform and analyze ACAS, STIG, SCAP, and application-security assessments.
• Analyze vulnerabilities and security findings.
• Maintain POA&M and eMASS evidence.
• Work with developers and technical teams to remediate findings.
• Validate remediation and finding closure.
• Support SSP/control evidence and assessment readiness.
• Support release-security reviews.
• Integrate security findings into Agile/DevSecOps workflows.
• Support ATO sustainment and cybersecurity taskings.

Skills

RMF cybersecurity

Vulnerability assessment

DevSecOps collaboration

U.S. citizenship

Education

BA/BS in engineering or four years' equivalent

Tools

ACAS/SCAP

eMASS

Fortify/SAST/DAST

Kubernetes

Java exposure

Job description

Integral Federal, Inc. seeks a Cybersecurity/RMF Engineer to provide hands-on security and RMF support for the JPES/JCRM Agile/DevSecOps team.

You will partner with developers, cloud/infrastructure engineers, testers, and the IA Lead to identify, remediate, validate, and document security findings throughout the software lifecycle. The role requires DoD RMF and NIST 800-53 experience, STIG and vulnerability-assessment skills, and strong collaboration with cross-functional teams.