DoD Enterprise Cybersecurity Engineer (RMF & STIG)

SHR Consulting Group; Arlington, Northern (VA, KY); On-site; USD 135,000 - 155,000; Full time

Benefits offered by this job

Medical coverage

401(k) with company contribution

Paid time off

Certification reimbursement

Training support

Life and disability insurance

Job summary

SHR Consulting Group, LLC is seeking a Cybersecurity Engineer to support RMF and DoD enterprise security efforts in the Arlington, VA area. The role focuses on assessments, remediation, and reporting across DoD enterprise systems, with hands-on work using DISA STIGs, eMASS, ACAS, and related tools.

Responsibilities include preparing RMF artifacts, supporting readiness inspections, and delivering data-driven risk reports to leadership. Requires active Secret clearance and DoD experience.

Qualifications

• Bachelor's degree in cybersecurity, IT, CS or related discipline.
• 5+ years of DoD/federal cyber engineering, RMF, and vulnerability management experience.
• Hands-on RMF package support using eMASS and security controls.
• Experience with DISA STIGs, ACAS, Axonius, Evaluate-STIG, Trellix or similar ESS tools.
• Strong reporting and briefing skills for leadership and program sponsors.
• Active Secret clearance is required; TS/SCI eligibility preferred.

Responsibilities

• Assess servers, endpoints, apps, and devices using STIGs and ESS tools.
• Analyze results and identify vulnerabilities and remediation priorities.
• Maintain RMF artifacts in eMASS with POA&Ms and risk records.
• Prepare evidence and respond to readiness inspections.
• Coordinate with teams to validate findings and remediations within timelines.
• Create data-driven reports and executive briefings.
• Maintain documentation per DoD RMF and contract requirements.

Skills

RMF

DISA STIG

eMASS

ACAS

Axonius

Evaluate-STIG

Trellix

Excel

PowerPoint

Communication

Education

Bachelor's degree in cybersecurity / IT / CS or related discipline

Tools

SCAP Compliance Checker

STIG Viewer

Nessus

Splunk

Power BI

Tenable SecurityCenter

Job description

SHR Consulting Group, LLC is seeking a Cybersecurity Engineer to support RMF and DoD enterprise security efforts in the Arlington, VA area. The role focuses on assessments, remediation, and reporting across DoD enterprise systems, with hands-on work using DISA STIGs, eMASS, ACAS, and related tools.

Responsibilities include preparing RMF artifacts, supporting readiness inspections, and delivering data-driven risk reports to leadership. Requires active Secret clearance and DoD experience.