RMF & DoD Cybersecurity Engineer | ATO & STIGs Expert

ISPA Technology, LLC; Panama City, Northern (FL, KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

ISPA Technology, LLC is seeking an experienced Cybersecurity Engineer to support secure systems in compliance with federal and DoD cybersecurity standards. The role emphasizes RMF expertise, DoD STIGs, and ATO processes in a fast-paced environment.

The candidate will develop and manage RMF packages, conduct security assessments, and collaborate with IT teams to ensure secure system design and implementation, while maintaining thorough documentation for audits.

Qualifications

• Expert knowledge of NIST RMF and DoD STIGs.
• Experience developing RMF packages, security assessments, and achieving ATO.
• Hands-on with Nessus, Wireshark, SCC and SIEM platforms.
• Strong understanding of cybersecurity principles, risk management and compliance.
• DoD 8570 compliant certs such as Security+, CISSP, CEH.

Responsibilities

• Develop, implement, and maintain cybersecurity policies and procedures aligned with RMF and DoD standards.
• Lead RMF package creation and system authorization efforts.
• Conduct security assessments, vulnerability scans, and risk analyses.
• Support ATO processes and continuous monitoring activities.
• Apply DoD STIGs and other cybersecurity directives.
• Utilize security tools to identify and mitigate risks.
• Collaborate with engineering and IT teams to ensure secure design and implementation.
• Maintain documentation and support audits.

Skills

NIST RMF expert

DoD STIGs

RMF packages

Security assessments

ATO processes

DoD directives

Nessus

Wireshark

SCC

SIEM platforms

collaboration

Tools

Nessus

Wireshark

SCC

SIEM

Job description

ISPA Technology, LLC is seeking an experienced Cybersecurity Engineer to support secure systems in compliance with federal and DoD cybersecurity standards. The role emphasizes RMF expertise, DoD STIGs, and ATO processes in a fast-paced environment.

The candidate will develop and manage RMF packages, conduct security assessments, and collaborate with IT teams to ensure secure system design and implementation, while maintaining thorough documentation for audits.