Security Operations & Assessment Engineer (RMF, FedRAMP)

Aderas, Inc; Washington (District of Columbia); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Life/AD&D insurance

Health insurance premium contribution

401k plan with company matching

Paid training & course reimbursement

Paid time off

Job summary

Aderas, Inc is seeking a Security Operations & Assessment Engineer in Washington, DC with strong RMF/NIST experience. You will evaluate security controls, review system documentation, and analyze vulnerabilities to support ATO decisions.

The role requires federal cybersecurity knowledge, collaboration with ISSOs/ISSMs, and experience in continuous monitoring strategies to align with compliance frameworks.

Qualifications

• Proficient with RMF and NIST SP 800-37; familiar with NIST SP 800-53 controls.
• Experience in cybersecurity, system auditing, or security engineering.
• Bachelor’s or higher in a relevant field; professional security certifications are a plus.

Responsibilities

• Evaluate and assess security controls per RMF and NIST standards.
• Review SSPs, SAPs, risk assessments, contingency plans, and PIAs for accuracy.
• Analyze vulnerability scans, DISA STIGs, CIS benchmarks, and architecture diagrams.

Skills

RMF familiarity (NIST SP 800-37)

FISMA & federal policies

Security auditing / engineering

Education

Bachelor's degree or higher in IT/Cybersecurity/CS/Engineering

Certifications preferred (CISSP/CISA/CEH/SSCP)

Job description

Aderas, Inc is seeking a Security Operations & Assessment Engineer in Washington, DC with strong RMF/NIST experience. You will evaluate security controls, review system documentation, and analyze vulnerabilities to support ATO decisions.

The role requires federal cybersecurity knowledge, collaboration with ISSOs/ISSMs, and experience in continuous monitoring strategies to align with compliance frameworks.