RMF/ACAS Engineer – DoD Cyber Defense (TS/SCI)

IPSecure, Inc.; San Antonio (TX); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Unlimited vacation

401(k) retirement plan

Education and certification reimburse

Paid federal holidays

Identity protection plan

Job summary

IPSecure is seeking an experienced Information Assurance (IA)/RMF Analyst to support DoD and U.S. Air Force cybersecurity operations at JBSA Lackland, San Antonio, TX. The candidate will execute RMF across the A&A lifecycle.

The ideal candidate will be proficient with ACAS (Nessus/Tenable.sc), vulnerability management, and security control assessment; responsible for SSPs, SARs, POA&Ms, and supporting evidence. Active TS/SCI clearance required.

Qualifications

• Hands-on RMF experience for DoD/federal systems.
• Experience developing RMF artifacts (SSPs, SARs, POA&Ms).
• Proficiency with ACAS/Nessus and vulnerability reports.

Responsibilities

• Execute and support RMF across the system authorization lifecycle.
• Develop and maintain RMF artifacts and documentation.
• Maintain SSPs, SARs, POA&Ms, and supporting evidence.
• Implement and document NIST SP 800-53 controls.
• Perform continuous monitoring to maintain posture and authorization.
• Operate ACAS/Nessus and manage scan zones, policies, credentials.
• Analyze vulnerability findings and coordinate remediation.
• Collaborate with ISSM, SCAs, system owners, and gov't personnel.

Skills

RMF execution

Vulnerability management

ACAS/Tenable

NIST SP 800-53

RMF documentation

Security control assessment

Stakeholder communication

Windows/Linux/network infra

Education

Bachelor's degree in IT/CS/Cybersecurity/IS/Engineering

Tools

ACAS

Nessus

Security Center/Tenable.sc

SCAP

Job description

IPSecure is seeking an experienced Information Assurance (IA)/RMF Analyst to support DoD and U.S. Air Force cybersecurity operations at JBSA Lackland, San Antonio, TX. The candidate will execute RMF across the A&A lifecycle.

The ideal candidate will be proficient with ACAS (Nessus/Tenable.sc), vulnerability management, and security control assessment; responsible for SSPs, SARs, POA&Ms, and supporting evidence. Active TS/SCI clearance required.