DoD RMF ISSE: Cloud Security & ATO Leader

Actalent; Annapolis (MD); Hybrid; USD 206,640,000 - 234,192,000; Full time

Job summary

Actalent is seeking an Information Systems Security Engineer to lead cybersecurity efforts for DoD software projects in Annapolis, MD. You will drive RMF compliance, prepare security packages, and obtain ATO for AWS container workloads, collaborating with engineering, cybersecurity, and customer teams.

The role requires deep DoD cybersecurity expertise, hands-on use of tools like eMASS, STIG Viewer, SonarQube, Trivy, and cloud security services, plus strong communication and risk-based decision

Qualifications

• Minimum 5 years as an ISSE on DoD software projects.
• Experience producing SSPs/POA&Ms for RMF/STIG.
• Hands-on with DoD tools like eMASS and STIG Viewer.
• Proven track record obtaining a DoD ATO for AWS workloads.
• Strong knowledge of cybersecurity for cloud environments.

Responsibilities

• Lead DoD cybersecurity efforts across the full software lifecycle.
• Generate and submit SSPs, POA&Ms, and related artifacts.
• Apply eMASS/STIG Viewer to manage security packages.
• Obtain and maintain DoD ATO for AWS container workloads.
• Guide security mitigations from SAST/Trivy results.
• Recommend data protection and access control strategies.
• Test and verify security controls to reduce risk.
• Perform threat modeling and prioritize mitigations.
• Lead vulnerability management with cross-team coordination.
• Monitor security posture using Splunk/CloudWatch.
• Collaborate with engineering, cybersecurity, business, and customers.
• Support DevSecOps security integration across releases.
• Utilize Wiz/eMASSter for posture assessment.

Skills

ISSE DoD projects

RMF & STIG

eMASS/STIG Viewer

DoD ATO for AWS

SAST (SonarQube)

Container security (Trivy)

Threat modeling

Vulnerability management

Cloud security monitoring

Certifications (CISSP/CASP/Security+)

Tools

eMASS

STIG Viewer

SonarQube

Trivy

Wiz

Splunk

CloudWatch

Security Hub

GuardDuty

Job description

Actalent is seeking an Information Systems Security Engineer to lead cybersecurity efforts for DoD software projects in Annapolis, MD. You will drive RMF compliance, prepare security packages, and obtain ATO for AWS container workloads, collaborating with engineering, cybersecurity, and customer teams.

The role requires deep DoD cybersecurity expertise, hands-on use of tools like eMASS, STIG Viewer, SonarQube, Trivy, and cloud security services, plus strong communication and risk-based decision