InfoSec Engineer - RMF & DoD Classified

Socket.dev; Jessup (MD); On-site; USD 120,000 - 170,000; Full time

Job summary

ClearPoint, part of ClearSpectrum LLC, seeks an Information System Security Engineer III to lead RMF/ATO efforts for MERIDIAN, the AI-enabled Secure Space Operations platform. You will work with engineers to embed security in architecture, conduct vulnerability testing, and manage RMF documentation and continuous monitoring.

You will mentor security staff, translate findings into remediation guidance, and ensure controls such as identity/RBAC and encryption are implemented while aligning with

Qualifications

• Active TS/SCI clearance with Polygraph and US citizenship.
• Bachelor's degree in Computer Science, Software Engineering, or related field; 4 years may substitute.
• 5–8 years as an ISSE or Cybersecurity Engineer with DoD/IC exposure.
• Proficiency with networking, firewalls, and security monitoring tools.
• Experience with RMF or DoD 8500-series compliance and NIST SP 800-53.

Responsibilities

• Develop and maintain RMF packages (SSP, SAR, POA&M).
• Review architecture and provide security guidance during design and development.
• Conduct vulnerability assessments and security testing of live systems.
• Identify security weaknesses and drive system-level remediation.
• Implement and manage access controls, auditing, and encryption; mentor junior staff.

Skills

TS/SCI clearance

RMF/DoD RMF

Vulnerability assessment

System architecture review

Security monitoring

Mentoring security staff

CI/CD security

Education

Bachelor's degree in CS/SE

Tools

SAST/DAST tools

Security monitoring tools

Job description

ClearPoint, part of ClearSpectrum LLC, seeks an Information System Security Engineer III to lead RMF/ATO efforts for MERIDIAN, the AI-enabled Secure Space Operations platform. You will work with engineers to embed security in architecture, conduct vulnerability testing, and manage RMF documentation and continuous monitoring.

You will mentor security staff, translate findings into remediation guidance, and ensure controls such as identity/RBAC and encryption are implemented while aligning with