RMF Cyber Security Engineer | eMASS, NIST 800-53, AWS

System One; Baltimore (MD); On-site; USD 120,000 - 165,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Dental

Vision

Life insurance

Flexible spending accounts

Job summary

System One is seeking a Cyber Security Engineer in Baltimore to own RMF artifacts, manage POA&Ms in eMASS, and coordinate risk remediation with system owners. You will ensure compliance with NIST SP 800-53 and DoD STIGs, while integrating vulnerability management into CI/CD processes.

You will collaborate with Cloud Architects, System Engineers, and Admins to define remediation timelines, support AWS security operations, and drive security improvements across the enterprise.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or related field.

Responsibilities

• Serve as the primary custodian of the RMF and authorization artifacts.
• Prepare, author, and maintain RMF artifacts including SSP, SAR, and Continuous Monitoring Strategy.
• Lead curation and validation of evidence for NIST 800-53 Rev.4 to Rev.5 transitions.
• Author and track Plans of Action and Milestones (POA&Ms) in eMASS and ticketing workflows.
• Partner with System Owners and engineers to define remediation timelines and resource needs.
• Review non-compliance closures and remediation evidence for AO approval.
• Assess impact for directed cyber tasks on the cARMY AWS architecture and workloads.
• Review STIGs/SRGs using STIG Viewer and automated tooling.
• Support GitLab CI/CD by integrating vulnerability analysis into Agile workflows.
• Oversee continuous monitoring and vulnerability scanning with ACAS and related tools.
• Maintain cybersecurity dashboards, POA&Ms aging, and security tickets.

Skills

RMF

NIST 800-53

AWS Cloud

eMASS

STIGs

DevSecOps

Vulnerability Mgmt

POA&M management

GitLab CI/CD

Cloud security monitoring

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity or related field

Tools

ACAS

STIG Viewer

CloudWatch

CloudTrail

EvaluateSTIG

Power BI

ServiceNow

GitLab CI/CD

Job description

System One is seeking a Cyber Security Engineer in Baltimore to own RMF artifacts, manage POA&Ms in eMASS, and coordinate risk remediation with system owners. You will ensure compliance with NIST SP 800-53 and DoD STIGs, while integrating vulnerability management into CI/CD processes.

You will collaborate with Cloud Architects, System Engineers, and Admins to define remediation timelines, support AWS security operations, and drive security improvements across the enterprise.