Lead Cybersecurity Engineer – RMF, Cloud Security

Applied Information Sciences, Inc.; Huntsville (AL); On-site; USD 120,000 - 181,000; Full time

Job summary

Applied Information Sciences (AIS) seeks a Lead Security Engineer to steer RMF lifecycle activities for mission-critical federal systems, focusing on risk management, authorization, and continuous monitoring. You will lead a team, shape security strategies, and collaborate with stakeholders to ensure compliant, secure IT environments.

The role emphasizes security controls, risk analysis, and incident response, with a strong emphasis on policy, training, and program governance within a federal

Qualifications

• Active TS/SCI clearance.
• 8+ years of secure design, analysis, and testing of information security systems and products.
• 8+ years applying cybersecurity methods, standards, and approaches to ensure security safeguards are implemented and documented.
• 8+ years developing and maintaining security test plans to identify and mitigate system risks.
• Demonstrated experience leading or supporting RMF lifecycle activities (Prepare, Categorize, Select, Implement, Assess, Authorize, Monitor).
• Strong understanding of NIST 800-37, NIST 800-53, and related federal cybersecurity frameworks.
• Experience supporting system authorization (ATO) processes and documentation deliverables.
• One of the following certifications required: CISSP or CEH.

Responsibilities

• Lead, mentor, and supervise a team of contractor security professionals responsible for end-to-end RMF lifecycle implementation across IT systems.
• Oversee and coordinate activities within the Prepare step of the RMF, ensuring roles, responsibilities, and risk strategies are clearly defined and maintained.
• Guide system categorization efforts to ensure systems are classified appropriately based on mission impact and regulatory requirements.
• Advise on the selection, tailoring, and documentation of security controls aligned with risk tolerance and compliance frameworks.
• Oversee the implementation of technical, operational, and management security controls throughout system and application lifecycles.
• Ensure security control assessments are properly planned, executed, and documented to validate effectiveness.
• Prepare and review authorization package documentation to support system authorization and executive decision-making.
• Direct continuous monitoring activities, including metrics collection and reporting to support ongoing compliance and risk reduction.
• Serve as a principal cybersecurity advisor for risk analysis, incident response, system remediation, and audit support.
• Promote a culture of security awareness by providing technical guidance and training to team members and stakeholders.
• Track, report, and communicate status, risks, and improvement opportunities to leadership.
• Maintain current knowledge of RMF, NIST standards, and cybersecurity best practices, driving continuous process improvement.

Skills

RMF lifecycle

NIST standards

Security controls design

Security program management

Cybersecurity consulting

Job description

Applied Information Sciences (AIS) seeks a Lead Security Engineer to steer RMF lifecycle activities for mission-critical federal systems, focusing on risk management, authorization, and continuous monitoring. You will lead a team, shape security strategies, and collaborate with stakeholders to ensure compliant, secure IT environments.

The role emphasizes security controls, risk analysis, and incident response, with a strong emphasis on policy, training, and program governance within a federal