RMF Cybersecurity Engineer (DoD/DevSecOps)

Integral; Fort Meade (MD); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Medical, Dental & Vision Insurance

Flexible Spending Accounts

Paid Time Off & Holidays

Earned Bonuses & Awards

Professional Training Reimbursement

Paid Parking

Job summary

Integral Federal is seeking a Cybersecurity / RMF Engineer to provide hands-on cybersecurity and RMF support to the JPES/JCRM Agile/DevSecOps team. The engineer works closely with developers, DevSecOps personnel, cloud/infrastructure engineers, testers, and the IA Lead to identify, remediate, validate, and document security findings throughout the software lifecycle.

The role requires DoD RMF and NIST 800-53 experience, STIG/SCAP familiarity, POA&M and eMASS experience, and the ability to

Qualifications

• BA/ BS in an engineering discipline; four years of experience can substitute for a degree.
• 4+ years cybersecurity/RMF experience.
• DoD RMF and NIST 800-53 experience.
• STIG and vulnerability‑assessment experience.
• POA&M and security‑evidence experience.
• Ability to work with software developers, DevSecOps engineers, and system administrators.
• U.S. citizenship and required Secret eligibility.

Responsibilities

• Support RMF and continuous‑monitoring activities.
• Perform and analyze ACAS, STIG, SCAP, and application‑security assessments.
• Analyze vulnerabilities and security findings.
• Maintain POA&M and eMASS evidence.
• Work with developers and technical teams to remediate findings.
• Validate remediation and finding closure.
• Support SSP/control evidence and assessment readiness.
• Support release‑security reviews.
• Integrate security findings into Agile/DevSecOps workflows.
• Support ATO sustainment and cybersecurity taskings.

Skills

Cybersecurity

RMF

Team collaboration

Citizenship

Education

Bachelor's degree in engineering

Tools

eMASS

ACAS/SCAP

Fortify/SAST/DAST

Job description

Integral Federal is seeking a Cybersecurity / RMF Engineer to provide hands-on cybersecurity and RMF support to the JPES/JCRM Agile/DevSecOps team. The engineer works closely with developers, DevSecOps personnel, cloud/infrastructure engineers, testers, and the IA Lead to identify, remediate, validate, and document security findings throughout the software lifecycle.

The role requires DoD RMF and NIST 800-53 experience, STIG/SCAP familiarity, POA&M and eMASS experience, and the ability to