Mid A&A Cybersecurity Engineer | RMF & FISMA Focus

imagineeer LLC; Arlington (VA); Hybrid; USD 90,000 - 140,000; Full time

Job summary

Imagineeer is seeking a motivated Mid-Level A&A Cybersecurity Engineer to support federal government clients in Arlington, VA. You will contribute to RMF and FISMA compliance, ATO activities, and security documentation development.

The role offers growth into senior levels and exposure to continuous monitoring and security control implementations. Ideal candidates have 4+ years in A&A, familiarity with RMF, and Security+ or equivalent, with the ability to obtain a Public Trust clearance.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS, or related field.
• 4+ years of cybersecurity experience with a focus on A&A processes.
• 2+ years of direct NIST RMF and FISMA compliance experience.
• Active Security+ or equivalent (SSCP, GSEC).
• Ability to obtain and maintain a Public Trust clearance.
• Strong knowledge of RMF and FISMA requirements.
• Familiarity with NIST 800-53 and security control catalogs.
• Understanding of A&A lifecycle and security control assessments.
• Ability to develop, maintain, and review SSPs, POA&Ms, SARs.
• Familiarity with eMASS, Xacta, Archer.
• Knowledge of Nessus/Qualys and common tools.
• Basic risk assessment and security analysis skills.
• Strong technical writing and documentation skills.
• Attention to detail and commitment to high-quality work.
• Good verbal and written communication, team-oriented.
• Able to work independently and in a collaborative environment.

Responsibilities

• Assist in developing and maintaining security authorization packages.
• Support security control assessments (SCA) and document results.
• Help develop and maintain System Security Plans (SSPs).
• Track and manage Plans of Action and Milestones (POA&M).
• Participate in security impact analyses for system changes.
• Support implementation of security controls and remediation efforts.
• Assist in vulnerability assessments and document results.
• Maintain authorization documentation for ATO and reauthorization.
• Support continuous monitoring (ConMon) activities.
• Collaborate with system owners, security teams, and stakeholders.
• Assist in developing security policies, procedures, and SOPs.
• Contribute to Security Assessment Reports (SARs) and artifacts.
• Participate in security working groups, meetings, and briefings.

Skills

Security+

RMF

FISMA

A&A

Documentation

Technical Writing

Communication

Education

Bachelor’s degree in Cybersecurity/IT/CS

Tools

eMASS

Xacta

Archer

Job description

Imagineeer is seeking a motivated Mid-Level A&A Cybersecurity Engineer to support federal government clients in Arlington, VA. You will contribute to RMF and FISMA compliance, ATO activities, and security documentation development.

The role offers growth into senior levels and exposure to continuous monitoring and security control implementations. Ideal candidates have 4+ years in A&A, familiarity with RMF, and Security+ or equivalent, with the ability to obtain a Public Trust clearance.