RMF & STIG Tester — DoD Cyber Security Analyst

Koitecc Solutions; Odenton (MD); Hybrid; USD 108,000 - 195,000; Full time

Job summary

Leidos in Ft. Meade, MD is seeking a Cyber Security STIG Tester to perform security assessments using STIG Checklists, SCAP scans, and ACAS/ESS to identify vulnerabilities and ensure DoD IA compliance.

The role requires an active Secret clearance with experience in RMF, eMASS/Xacta, and risk assessment. You will collaborate with system admins and deliver reporting for security briefings.

Qualifications

• Bachelor’s degree and 8+ years of experience or equivalent.
• Experience with STIG Compliance, SCAP tools and vulnerability assessments.
• Experience using eMASS and/or Xacta.
• Solid understanding of RMF and SDLC.
• Analytical and problem-solving skills.

Responsibilities

• Ensure STIG Checklists are up to date and settings are enforced with minimal impact.
• Educate admins on STIG completion/edits as required.
• Review STIG test results and pass to owners/admins.
• Track response times to STIG findings and report to security briefing.
• Support POA&M analysis and eMASS updates.
• Perform cybersecurity lab testing/hardening for deployments.
• Review ACAS/ESS data and manage scan inclusions.
• Maintain SOPs for testing and reporting activities.
• Support testing events and preparation.
• Perform vulnerability/risk analyses across SDLC.
• Support RMF-related artifacts for AO actions.

Skills

STIG Compliance

SCAP tools

Vulnerability assessments

eMASS or Xacta

RMF & SDLC

Analytical problem-solving

Education

Bachelor’s degree

Tools

ACAS

ESS Scans

SCAP tools

Job description

Leidos in Ft. Meade, MD is seeking a Cyber Security STIG Tester to perform security assessments using STIG Checklists, SCAP scans, and ACAS/ESS to identify vulnerabilities and ensure DoD IA compliance.

The role requires an active Secret clearance with experience in RMF, eMASS/Xacta, and risk assessment. You will collaborate with system admins and deliver reporting for security briefings.