DoD Cyber RMF & Vulnerability Engineer II

KOAM Engineering Systems (KES); San Diego (CA); On-site; USD 110,000 - 150,000; Full time

Job summary

KOAM Engineering Systems (KES) is seeking an Information Systems Security Engineer II to support cybersecurity engineering, compliance, vulnerability management, and RMF activities across DoD programs in a secure test environment. The candidate will implement and maintain cybersecurity controls, assist with system authorization, and ensure requirements are integrated into systems and networks.

The role requires hands-on cybersecurity experience in secure DoD environments, vulnerability scanning,

Qualifications

• Bachelor's degree in related fields such as computer science, computer engineering, information systems, network engineering, systems engineering, software engineering or a closely related discipline
• Equivalent specialized knowledge through military training, formal instruction, certifications, and practical experience
• Security+ (DoD IAT Level II) or equivalent within 3 months
• U.S. Citizenship required and DoD clearance at final Secret level

Responsibilities

• Support cybersecurity engineering, compliance, vulnerability management, and RMF activities for DoD systems.
• Implement cybersecurity strategies, controls, and corrective actions with ISSO and teams.
• Perform security assessments, vulnerability reviews, and compliance checks to identify risks and remediation actions.
• Conduct DISA STIG assessments for OS, apps, databases, and network devices to maintain DoD compliance.
• Support vulnerability management using ACAS, Nessus, SCAP, eMASS, and related tools.

Skills

Security compliance

Vulnerability management

RMF/ATO support

STIG assessments

ACAS/Nessus/SCAP

Trellix

Windows

Linux

Documentation

Team collaboration

Education

Bachelor's degree in CS/CE/IS/engineering

Security+ (DoD IAT II) or equivalent

Tools

ACAS

Nessus

SCAP

eMASS

Trellix

Windows

Linux

Job description

KOAM Engineering Systems (KES) is seeking an Information Systems Security Engineer II to support cybersecurity engineering, compliance, vulnerability management, and RMF activities across DoD programs in a secure test environment. The candidate will implement and maintain cybersecurity controls, assist with system authorization, and ensure requirements are integrated into systems and networks.

The role requires hands-on cybersecurity experience in secure DoD environments, vulnerability scanning,