Hybrid RMF Security Engineer - Automation & Vulnerabilities

MAXISIQ, Inc.; San Antonio (TX); Hybrid; USD 126,000 - 154,000; Full time

Job summary

MAXISIQ, Inc. is seeking a Junior Security Engineer to support DoD RMF and ICD 503 requirements, applying security engineering principles and hands-on technical expertise.

The role focuses on system hardening, automation, vulnerability remediation, and RMF A&A activities. The hybrid position offers locations in San Antonio, Augusta, or Fort Meade, with responsibilities ranging from vulnerability scanning to secure software development collaboration and implementing DISA STIGs and CIS Benchmarks

Qualifications

• 5+ years as an Information Systems Security Engineer or Security Engineer with RMF experience.
• Working knowledge of cybersecurity tools, such as ACAS, DISA STIGs/SCAPs/CIS Benchmarks.
• Hands-on experience with vulnerability management and remediation across multiple operating systems.
• Proficiency with automation tools (Ansible) and scripting (Python/Bash).
• Working knowledge of virtualization platforms (VMware/ESXi) and container technologies (Docker).
• Familiarity with network device hardening and STIG implementation for Cisco and Juniper platforms.
• Experience applying DISA STIGs, SCAPs, and CIS Benchmarks.
• Top Secret/SCI Security Clearance.
• Bachelor’s degree from an accredited college or university.
• Security Architect certifications IAW DoD Directive 8140.01 (e.g., CompTIA CASP, Cisco CCSP, SANS GSEC).

Responsibilities

• Assist developing layered protections and establish cybersecurity SOPs or guidelines for authorization boundaries.
• Perform vulnerability management and implement fix actions across Windows, Linux/Unix, and containerized environments.
• Engineer and automate and deploy security remediation configurations using tools such as Ansible and scripting in Python and Bash.
• Implement and maintain DISA STIGs and CIS Benchmarks across diverse platforms, including RHEL, Ubuntu, Windows operating systems, VMware/ESXi, and 3rd-party applications, as well as network devices such as Cisco (NXOS, ASRs, IOS-XE, ASA) and Juniper.
• Support container security engineering with Docker and related technologies.
• Conduct vulnerability scans using ACAS, interpret results, and drive remediation efforts.
• Collaborate with developers to ensure secure coding practices and integrate security into CI/CD pipelines.
• Delineate physical and logical security boundaries for systems and networks.
• Ensure software developers are trained on secure software development practices.
• Generate and interpret vulnerability scans, implement STIGs and CIS Benchmarks, and support RMF Continuous Monitoring activities, including remediating and/or mitigating findings on system POA&Mss.

Skills

RMF experience

Vulnerability management

Automation (Ansible)

Python scripting

Linux/Windows administration

Education

Bachelor's degree in a relevant field

Tools

Ansible

Python

Bash

VMware ESXi

Docker

DISA STIGs/SCAPs/CIS Benchmarks

ACAS

Cisco devices

Juniper devices

Job description

MAXISIQ, Inc. is seeking a Junior Security Engineer to support DoD RMF and ICD 503 requirements, applying security engineering principles and hands-on technical expertise.

The role focuses on system hardening, automation, vulnerability remediation, and RMF A&A activities. The hybrid position offers locations in San Antonio, Augusta, or Fort Meade, with responsibilities ranging from vulnerability scanning to secure software development collaboration and implementing DISA STIGs and CIS Benchmarks