DoD RMF+ Cyber Security Engineer (TS/SCI)

RPMGlobal; Bethesda, Northern (MD, KY); Hybrid; USD 110,000 - 170,000; Full time

Job summary

RPMGlobal seeks a cybersecurity professional to support DoD systems under the DOMEX platform. You will design, develop, and implement secure on-prem infrastructure and integrate security across the system lifecycle. This role emphasizes RMF activities, vulnerability management, and secure SDLC practices.

You will lead RMF integration, develop SSPs/SARs, and apply STIGs with SCAP tools. Active TS/SCI with CI polygraph is required, plus relevant IASAE Level II certification and scripting

Qualifications

• Must hold TS/SCI with CI polygraph eligibility.
• At least one IASAE Level II DoD 8570.01-M certification.
• Experience reviewing vulnerabilities and building mitigations.
• Ability to architect and deploy vulnerability scanning solutions.
• Experience with RMF integration into SDLC and ATO processes.

Responsibilities

• Support secure architecture, design, and DoD system implementation.
• Lead RMF activities and security control validation.
• Develop SSPs, SARs, risk assessments, and POA&Ms.
• Apply STIGs and verify compliance with SCAP/STIG tools.
• Maintain scanning infrastructure and analyze vulnerabilities.
• Support DoD/IC systems through RMF+ and incident response.

Skills

Active TS/SCI

CISSP

RMF

Scripting

Vulnerability analysis

Education

Bachelor's degree with 3 years experience

High School Diploma/GED with 5 years experience

Master's Degree with 3 years experience

Tools

OWASP

Fortify

Tenable

eMASS

SCAP

Job description

RPMGlobal seeks a cybersecurity professional to support DoD systems under the DOMEX platform. You will design, develop, and implement secure on-prem infrastructure and integrate security across the system lifecycle. This role emphasizes RMF activities, vulnerability management, and secure SDLC practices.

You will lead RMF integration, develop SSPs/SARs, and apply STIGs with SCAP tools. Active TS/SCI with CI polygraph is required, plus relevant IASAE Level II certification and scripting