Senior Cybersecurity Engineer - RMF, Cloud & DoD Ops

Chenega MIOS SBU; Vienna (VA); On-site; USD 180,000 - 210,000; Full time

Job summary

Chenega MIOS in Vienna, VA seeks a Senior Cyber Security Engineer to support critical DoD and Intel missions, focusing on cybersecurity engineering, risk management, and compliance across cloud and on‑prem environments. The role emphasizes secure operations and system authorization.

Responsibilities include applying RMF to support A&A, preparing SSPs and ATO artifacts in XACTA/eMASS, conducting vulnerability scans with ACAS, and implementing NIST 800‑53 controls in collaboration with DevSecOps

Qualifications

• Bachelor’s degree with 5+ years of experience in cybersecurity engineering.
• Experience with RMF, A&A, POA&M, and ATO documentation (XACTA/eMASS).
• Experience securing Linux and Windows systems, patching and hardening.
• DoD 8570 IAT Level II or higher certification (e.g., Security+, CySA+, CISSP).

Responsibilities

• Applying RMF processes to support system A&A, including control selection, implementation, assessment, and continuous monitoring.
• Developing, reviewing, and maintaining SSPs, POA&Ms, SARs, and ATO artifacts in XACTA or eMASS.
• Conducting vulnerability assessments and compliance scans (ACAS) and tracking remediation.
• Implementing and validating security controls aligned with NIST 800-53, CNSSI 1253, and DoD guidance.
• Supporting system hardening, patching, and configuration management in accordance with STIGs.
• Monitoring systems for security events and supporting incident response and risk mitigation.
• Collaborating with system engineers, admins, and DevSecOps to integrate security across the lifecycle.
• Providing cybersecurity risk input to program leadership and stakeholders.

Skills

RMF

A&A

POA&M

ATO docs

NIST 800-53

Education

Bachelor's degree

Tools

XACTA

eMASS

ACAS

STIGs

Jira

Confluence

Job description

Chenega MIOS in Vienna, VA seeks a Senior Cyber Security Engineer to support critical DoD and Intel missions, focusing on cybersecurity engineering, risk management, and compliance across cloud and on‑prem environments. The role emphasizes secure operations and system authorization.

Responsibilities include applying RMF to support A&A, preparing SSPs and ATO artifacts in XACTA/eMASS, conducting vulnerability scans with ACAS, and implementing NIST 800‑53 controls in collaboration with DevSecOps