Remote DoD RMF Information Security Engineer I

Trace3; Colorado Springs, Northern (CO, KY); Hybrid; USD 110,000 - 135,000; Full time

Benefits offered by this job

Medical, dental, vision plans

401(k) with employer match

Competitive compensation

Training and development programs

Snacks and beverages at major offices

Job summary

Trace3 is seeking an Information System Security Engineer/Cybersecurity Engineer I for a DoD program in AWS GovCloud. You will lead RMF activities, develop system security plans, and coordinate with engineering teams to maintain Authority to Operate.

The role emphasizes vulnerability management, security architecture, and stakeholder guidance in a secure, classified environment; remote work is available, with opportunities to grow in a dynamic, tech‑focused culture.

Qualifications

• 3–5 years of cybersecurity, systems engineering, or information assurance.
• Experience implementing the RMF in regulated or classified environments.
• Active DoD 8570/8140 certification (e.g., CISSP, CASP+).
• Strong understanding of network architecture, encryption, and secure system configuration.
• Experience with vulnerability tools Nessus, ACAS, SCAP.

Responsibilities

• Security Architecture & Engineering: design and implement secure architectures across cloud and on‑premise networks.
• Assessment & Authorization: develop SSP, SAR, and POA&M, coordinate with officials and assessors.
• Vulnerability Management: conduct scans, prioritize risks, drive remediation with teams.
• Stakeholder Engagement: translate risks for leadership and advise on security trade‑offs.

Skills

RMF implementation

DoD 8570/8140

Vulnerability assessment

AWS security

NIST 800-53

Tools

Nessus

ACAS

SCAP

Docker

Kubernetes

Job description

Trace3 is seeking an Information System Security Engineer/Cybersecurity Engineer I for a DoD program in AWS GovCloud. You will lead RMF activities, develop system security plans, and coordinate with engineering teams to maintain Authority to Operate.

The role emphasizes vulnerability management, security architecture, and stakeholder guidance in a secure, classified environment; remote work is available, with opportunities to grow in a dynamic, tech‑focused culture.