DoD RMF Security Engineer for Autonomous Flight Systems

Merlinlabs; Boston (MA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Health, dental and life insurance

Unlimited vacation

401k with match

Job summary

Merlin Labs, an aerospace startup in Boston, is hiring a Security Engineer to ensure DoD programs are secure from the outset. You will interface with government customers, embed security early in architectures, and lead RMF accreditation efforts to deliver compliant, secure systems.

The role requires DoD security experience, active TS clearance, and hands-on use of Tenable Nessus, ACAS, and STIGs. On-site work at Merlin HQ in Boston with a strong emphasis on ownership and rigorous security

Qualifications

• Bachelor's degree with 5 years of cybersecurity experience on DoD or government programs.
• Experience with RMF accreditation lifecycle and working with government ISSOs, SCAs, or authorizing official representatives.
• Hands-on experience applying DISA SRGs and STIGs and conducting vulnerability assessments with tools such as Tenable Nessus, ACAS, or SCC.
• Active security clearance; TS preferred.

Responsibilities

• Apply systems security engineering methods across architecture, design, evaluation, and integration of defense programs and products.
• Support RMF accreditation and authorization activities through all required RMF steps.
• Engage with government customers and their security reps to define and implement protection requirements with DoD-level rigor.
• Apply and verify DISA SRGs and STIGs across program environments and maintain configuration management.
• Conduct vulnerability assessments and coordinate remediation with engineering teams.
• Evaluate tooling entering programs, ensuring security implications are understood before adoption.
• Support DevSecOps security integration in CI/CD with secure build processes for government deliverables.

Skills

RMF accreditation

DISA SRGs/STIGs

Vulnerability assessments

DevSecOps integration

Government DoD tooling

Security clearance

Education

Bachelor's degree in cybersecurity or related field

Tools

Tenable Nessus

ACAS

SCC

Job description

Merlin Labs, an aerospace startup in Boston, is hiring a Security Engineer to ensure DoD programs are secure from the outset. You will interface with government customers, embed security early in architectures, and lead RMF accreditation efforts to deliver compliant, secure systems.

The role requires DoD security experience, active TS clearance, and hands-on use of Tenable Nessus, ACAS, and STIGs. On-site work at Merlin HQ in Boston with a strong emphasis on ownership and rigorous security