RMF & Cybersecurity Engineer - Onsite in Columbus

Agile Defense, Inc.; Columbus (OH); On-site; USD 90,000 - 130,000; Full time

Job summary

Agile Defense, Inc. in Columbus, OH is seeking a Cybersecurity RMF Specialist to help document, assess, and strengthen the security posture of DoD systems.

This onsite role focuses on RMF artifacts, system categorization, and achieving Authority to Operate readiness through collaboration with the cyber team and government partners. The role requires gathering information from system owners and engineers, translating findings into defensible documentation, and tracking remediation from assessment

Qualifications

• Hands on RMF process experience in a federal/DoD environment.
• Experience producing security documentation reviewed by government.
• Bachelor's degree not required; equivalent experience considered.
• Experience via military service or government/industry roles.
• Familiarity with federal cybersecurity frameworks and DoD tools.

Responsibilities

• Develop and maintain RMF documentation and security artifacts.
• Collect, consolidate, and organize technical information for audit-ready deliverables.
• Support system categorization and risk assessment activities.
• Review vulnerability scans and build remediation plans (POA&Ms).
• Assist with STIG and security control checklists.
• Maintain inventories of hardware, software, and documentation.
• Coordinate with government remote cybersecurity team and stakeholders.
• Contribute to monthly reporting and recurring customer deliverables.
• Capture and validate documentation during ramp-up.

Skills

RMF experience

DoD RMF

Vulnerability scans

Technical writing

Stakeholder coordination

Education

Relevant experience or certs

Tools

ACAS

SCAP

eMASS

Job description

Agile Defense, Inc. in Columbus, OH is seeking a Cybersecurity RMF Specialist to help document, assess, and strengthen the security posture of DoD systems.

This onsite role focuses on RMF artifacts, system categorization, and achieving Authority to Operate readiness through collaboration with the cyber team and government partners. The role requires gathering information from system owners and engineers, translating findings into defensible documentation, and tracking remediation from assessment