DoD Cybersecurity Engineer — RMF & STIG Expert, Pentagon

SHR CONSULTING GROUP, LLC; Arlington (VA); On-site; USD 135,000 - 155,000; Full time

Benefits offered by this job

Medical, dental, vision coverage

401(k) with company match

Paid time off and holidays

Certification reimbursement & training

Job summary

SHR Consulting Group, LLC is seeking a Cybersecurity Engineer to support assessment, hardening, remediation, and reporting of cybersecurity posture across DoD enterprise systems in the National Capital Region, with on-site work in Arlington, VA. The role requires hands-on RMF activity, DISA STIG compliance, and experience with eMASS, ACAS, and other ESS tools.

You will develop RMF artifacts, support readiness inspections, and communicate findings to engineers, owners, and leadership.

Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related discipline.
• 5+ years of progressively responsible cybersecurity engineering, security assessment, vulnerability management, or RMF experience in a DoD or federal enterprise environment.
• Hands-on experience using eMASS to support RMF packages, security controls, assessment evidence, POA&Ms, and authorization activities.
• Experience conducting technical assessments using DISA STIGs, ACAS, Axonius, Evaluate-STIG, Trellix, and/or comparable enterprise cybersecurity tools.
• Experience supporting CCORI/CCRI/CORA-type inspections, cyber readiness assessments, or similar enterprise compliance initiatives.

Responsibilities

• Perform technical cybersecurity assessments of servers, endpoints, applications, network devices, and other enterprise information systems using DISA STIGs, ACAS, Axonius, Evaluate-STIG, Trellix, and other ESS tools.
• Analyze scan results, configuration findings, asset data, and evidence to identify vulnerabilities, misconfigurations, and remediation priorities.
• Develop, maintain RMF artifacts in eMASS, including control statements, assessment evidence, POA&Ms, risk records, and remediation status.
• Support readiness inspections and COOP activities with evidence collection, technical validation, and remediation tracking.
• Coordinate with multiple teams to validate findings and resolve vulnerabilities within deadlines.

Skills

RMF knowledge

DISA STIG

eMASS

ACAS

Vulnerability assessment

Technical reporting

Communication to leadership

Education

Bachelor's degree in cybersecurity, IT, CS, or engineering

Tools

Axonius

Evaluate-STIG

Trellix

STIG Viewer

Nessus / Tenable

Job description

SHR Consulting Group, LLC is seeking a Cybersecurity Engineer to support assessment, hardening, remediation, and reporting of cybersecurity posture across DoD enterprise systems in the National Capital Region, with on-site work in Arlington, VA. The role requires hands-on RMF activity, DISA STIG compliance, and experience with eMASS, ACAS, and other ESS tools.

You will develop RMF artifacts, support readiness inspections, and communicate findings to engineers, owners, and leadership.