DoD RMF Security Engineer – AWS Containerized Workloads

Actalent; United States; Hybrid; USD 120,000 - 154,000; Full time

Benefits offered by this job

Medical, dental & vision

401(k) Retirement Plan

Life Insurance

PTO / Time Off

Job summary

Actalent is seeking an Information Systems Security Officer to lead cybersecurity for DoD-focused software projects in a hybrid environment. You will drive RMF/STIG compliance, develop security packages, and obtain AWS container-based ATOs while coordinating with engineering, cybersecurity, and customer teams.

The role emphasizes DoD tooling like eMASS and STIG Viewer, SAST outputs from SonarQube, container scanning with Trivy, and cloud security best practices within AWS.

Qualifications

• Minimum 5 years as ISSE on DoD software projects.
• Experience generating SSPs/POA&Ms for RMF/STIG processes.
• Hands-on DoD tools: eMASS, STIG Viewer.
• Proven ability to obtain/maintain DoD ATO for AWS workloads.
• Strong RMF lifecycle collaboration with engineering, cybersecurity, business, and customers.

Responsibilities

• Lead ISSE activities across the DoD software lifecycle.
• Submit SSPs, POA&Ms, and artifacts for RMF/STIG processes.
• Apply DoD tools (eMASS, STIG Viewer) to build and validate security packages.
• Obtain and maintain at least one DoD ATO for AWS workloads.
• Define mitigations from SAST outputs (SonarQube) and container scans (Trivy).
• Recommend data protection measures and test security controls.
• Lead vulnerability management and coordinate remediation.
• Monitor security posture and respond to threats across workloads.
• Collaborate with stakeholders throughout RMF lifecycle and DevSecOps.

Skills

RMF compliance

DoD security processes

Threat modeling

Vulnerability management

Security monitoring

DevSecOps collaboration

SAST tooling

Tools

eMASS

STIG Viewer

SonarQube

Trivy

Wiz

eMASSter

Splunk

CloudWatch

GuardDuty

Security Hub

Job description

Actalent is seeking an Information Systems Security Officer to lead cybersecurity for DoD-focused software projects in a hybrid environment. You will drive RMF/STIG compliance, develop security packages, and obtain AWS container-based ATOs while coordinating with engineering, cybersecurity, and customer teams.

The role emphasizes DoD tooling like eMASS and STIG Viewer, SAST outputs from SonarQube, container scanning with Trivy, and cloud security best practices within AWS.