Risk Management Framework (RMF) Test Engineer

General Dynamics Electric Boat; Groton (CT); On-site; USD 70,000 - 100,000; Full time

Job summary

General Dynamics Electric Boat is seeking a RMF Cybersecurity Test Engineer to support system accreditation activities and strengthen compliance posture. The role requires interpreting complex RMF requirements and translating them into actionable tasks for the team, acting as the main liaison for Navy accreditation activities while working under ISSO supervision.

The position is 100% on-site with limited travel, focusing on RMF documentation, vulnerability assessments, and evidence collection to

Qualifications

• 2+ years evaluating RMF compliance for a system.
• Familiarity with DoD/Navy RMF guidance is a plus.
• Experience with vulnerability scanning tools like ACAS/Nessus is preferred.
• Experience with system compliance evidence collection and reporting.

Responsibilities

• Interpret RMF requirements across system components.
• Develop, maintain, and update RMF documentation.
• Identify security and compliance gaps on the system.
• Collaborate with the team to improve compliance posture.
• Stay current with STIGs, DoD/Navy guidance, and emerging cybersecurity threats.
• Support vulnerability assessments, remediation efforts, and evidence collection.

Skills

RMF knowledge

Documentation

Project management

Communication

Education

High School Diploma or equivalent

Tools

ACAS/Nessus

Evaluate STIG

STIG Manager

VRAM

CMRS

Job description

Overview

The Pre Commissioning Unit Local Area Network (PCULAN) team is seeking a RMF Cybersecurity Test Engineer to support ongoing system accreditation activities and strengthen the system’s overall compliance posture.

The ideal candidate will be able to interpret complex cybersecurity and compliance requirements and translate them into clear, actionable tasks for the team. In this role, they will identify compliance gaps, develop and document mitigation strategies, ensure adherence to applicable policies, and serve as the primary point of contact for Navy system accreditation activities.

Working under the oversight of the ISSO and in conjunction with the Lead System Engineer, the RMF Cybersecurity Test Engineer will help maintain a strong security posture and ensure the system continues to meet all requirements necessary to maintain its accreditation.

This position is 100% on-site with limited expectations for travel.

Duties and Responsibilities include:

• Interpret and apply RMF requirements across system components
• Develop, maintain, and update RMF documentation
• Identify security and compliance gaps on the system
• Collaborate with the team to improve compliance posture
• Stay current with STIGs, DoD/Navy guidance, and emerging cybersecurity threats
• Support vulnerability assessments, remediation efforts, and evidence collection

Qualifications

Required:

• High School Diploma or equivalent
• 2+ years of experience evaluating the compliance of a system against the Risk Management Framework (RMF)
• 2+ years of exposure to IT systems (Active Directory, Exchange, Tanium, Trellix, etc)
• Current active Secret security clearance is required
• Ability to obtain and maintain final DoD Top-Secret Clearance.

Preferred:

• Experience with vulnerability scanning tools (ACAS, Nessus)
• Experience using system compliance assessment tools (Evaluate STIG, STIG Manager)
• Experience with compliance reporting (VRAM, CMRS)
• Working knowledge of Navy Submarine systems and requirements.
• Current CompTIA Security +

Skills

• Experience with RMF Authorization To Operate (ATO) packages in Enterprise Mission Assurance Support Service (eMASS)
• Experience working on cybersecurity RMF body of evidence documentation such as Plan of Action & Milestones.
• Experience managing multiple projects simultaneously to meet project milestones.
• Excellent written and verbal communicator.
• Highly organized, detail-oriented, and capable of managing multiple projects simultaneously.
• Collaborative professional who works effectively with internal and external entities.

Physical Qualifications

Color Vision, Light Lifting, Pulling, Pushing

Environmental Attributes

Inside