Information Assurance Engineer: RMF & Vulnerability Management

CompQsoft, Inc.; Fort Meade (MD); On-site; USD 120,000 - 160,000; Full time

Job summary

CompQsoft seeks an Information Assurance (IA) Engineer to join our DISA program team at Fort Meade, MD. You will perform vulnerability assessments using ACAS and SCAP tools, identify security risks, and collaborate with system engineers to remediate findings.

The role requires strong RMF/ATO sustainment knowledge, communication of technical results to diverse stakeholders, and experience with DoD/Federal cyber environments.

Qualifications

• Bachelor’s degree in Cybersecurity, CS, IT or related field.
• 10+ years in cybersecurity, vulnerability management, or information assurance.
• Experience with ACAS vulnerability scans (Tenable/Nessus).
• Experience with SCAP Compliance Checker scans.
• Knowledge of RMF/ATO sustainment and vulnerability lifecycle.
• Familiarity with networking fundamentals (TCP/IP/DNS/AD).
• Strong communication skills to convey technical findings.

Responsibilities

• Examine internal IT controls and develop remediation strategies for SA implementation.
• Perform recurring vulnerability assessments using ACAS and SCAP tools.
• Analyze scan results to identify weaknesses and gaps.
• Prioritize vulnerabilities by severity, impact, and risk.
• Collaborate with engineers and admins to implement remediation.
• Validate remediation through follow-up scans and analysis.
• Prepare vulnerability reports, risk summaries, and executive briefings.
• Support RMF activities, continuous monitoring, and ATO sustainment.

Skills

Vulnerability management

Analytical thinking

Communication skills

Team collaboration

Education

Bachelor’s degree in Cybersecurity/CS/IT

Tools

ACAS (Tenable/Nessus)

SCAP Compliance Checker

RMF/ATO tools (eMASS)

DISA STIGs/SRGs

Job description

CompQsoft seeks an Information Assurance (IA) Engineer to join our DISA program team at Fort Meade, MD. You will perform vulnerability assessments using ACAS and SCAP tools, identify security risks, and collaborate with system engineers to remediate findings.

The role requires strong RMF/ATO sustainment knowledge, communication of technical results to diverse stakeholders, and experience with DoD/Federal cyber environments.