DoD Enterprise Cybersecurity Engineer: RMF, STIG & eMASS

ADP, Inc.; Arlington (VA); On-site; USD 135,000 - 155,000; Full time

Benefits offered by this job

Medical, dental & vision coverage

401(k) with company match

Paid time off & federal holidays

Certification reimbursement & training

Job summary

SHR Consulting Group, LLC is seeking a Cybersecurity Engineer (DoD Enterprise Security) to support RMF packages, DISA STIG compliance, and enterprise security posture across DoD systems in the National Capital Region. The role requires hands-on use of eMASS, ACAS, STIGs, and related tools, with collaboration across technical teams and leadership.

Responsibilities include data-driven reporting, remediation tracking, and coordinating with infrastructure and security operations to meet timelines.

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related discipline.
• 5+ years of cybersecurity engineering, security assessment, vulnerability management, or RMF experience in a DoD/federal environment.
• Hands-on experience with RMF packages, eMASS, and DISA STIG workflow.

Responsibilities

• Perform technical cybersecurity assessments of servers, endpoints, applications, and network devices using DISA STIGs, ACAS, Axonius, and ESS tools.
• Analyze scan results and evidence to identify vulnerabilities and remediation priorities.
• Develop RMF artifacts in eMASS, including POA&Ms and risk records.
• Support CCORI/CCI readiness inspections and remediation tracking.
• Create data-driven reports and executive briefing materials.

Job description

SHR Consulting Group, LLC is seeking a Cybersecurity Engineer (DoD Enterprise Security) to support RMF packages, DISA STIG compliance, and enterprise security posture across DoD systems in the National Capital Region. The role requires hands-on use of eMASS, ACAS, STIGs, and related tools, with collaboration across technical teams and leadership.

Responsibilities include data-driven reporting, remediation tracking, and coordinating with infrastructure and security operations to meet timelines.