Senior Cybersecurity Engineer: RMF/ATO Lead

Cubic Corporation; United States; On-site; USD 128,000 - 153,000; Full time

Job summary

Cubic Defense in the United States is seeking a Senior Cybersecurity Engineer to lead security engineering for a government customer, focusing on RMF authorization and ATO readiness. You will develop security plans, coordinate with authorizing officials, and guide implementation of controls across cloud, hybrid, and containerized environments.

A Top Secret clearance and DoD 8570/8140 certification are required.

Qualifications

• Bachelor's degree in cybersecurity, information systems, computer science, engineering, or a related field.
• At least 8 years of relevant cybersecurity, information-assurance, or security-engineering experience.
• Demonstrated experience supporting ATO packages and the federal RMF.
• Knowledge of security controls, assessment procedures, vulnerability management, and continuous monitoring.
• Experience developing security documentation and maintaining authorization evidence.
• Working knowledge of NIST SP 800-53 controls, RMF, eMASS, STIGs/SRGs, vulnerability management, continuous monitoring, and POA&M management.
• Experience securing cloud, hybrid, containerized, Kubernetes, or tactical-edge environments.
• Strong analytical, organizational, written, and verbal communication skills.
• Ability to work independently at a customer site while collaborating with a distributed project team.
• Active TOP Secret security clearance with ability to obtain SCI.
• DoD 8570/8140-compliant certification appropriate to the position.

Responsibilities

• Lead cybersecurity engineering and RMF activities supporting system authorization.
• Develop, review, and maintain security plans, control implementations, risk assessments, and authorization artifacts.
• Coordinate with customer authorizing officials, security representatives, system owners, and engineering teams.
• Assess system designs and configurations against applicable government security requirements.
• Guide the implementation and documentation of technical, operational, and management security controls.
• Perform security-control assessments, vulnerability reviews, compliance checks, and risk analysis.
• Track findings, plans of action and milestones, dependencies, and remediation activities through closure.
• Support system hardening, secure configuration, access control, auditing, logging, and continuous monitoring.
• Evaluate proposed system changes for cybersecurity and authorization impacts.
• Prepare for and participate in security reviews, assessments, test events, and authorization meetings.
• Translate cybersecurity requirements into actionable engineering tasks.
• Communicate security risks, status, and recommendations to technical and program leadership.
• Support ongoing compliance and maintenance of the authorization baseline after ATO approval.

Skills

Analytical skills

Organizational skills

Written and verbal communication

Independent working

Education

Bachelor's degree in cybersecurity, information systems, computer science, engineering, or a related field

Master's degree in cybersecurity or a related field

Tools

NIST SP 800-53 controls

RMF (Risk Management Framework)

eMASS

STIGs/SRGs

Vulnerability management tooling

Job description

Cubic Defense in the United States is seeking a Senior Cybersecurity Engineer to lead security engineering for a government customer, focusing on RMF authorization and ATO readiness. You will develop security plans, coordinate with authorizing officials, and guide implementation of controls across cloud, hybrid, and containerized environments.

A Top Secret clearance and DoD 8570/8140 certification are required.