Senior Cybersecurity Engineer – RMF, ICD 503 & DoD/IC

Cyberjobs; Reston (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Chenega MIOS in Reston, VA seeks a Senior Information Systems Security Engineer to lead RMF/CSRMC activities across multiple systems, ensuring DoD/IC compliance while integrating secure design into system lifecycles. The role emphasizes A&A, CDS considerations, and continuous monitoring in a high-tempo environment.

You will develop SSPs, perform vulnerability assessments, and collaborate with government stakeholders to align baselines with domain standards, including DevSecOps integrations and

Qualifications

• Bachelor’s degree in computer science, Information Assurance, Cybersecurity, Engineering, or related field (or equivalent experience).
• 10+ years of progressive IT/cybersecurity experience, with at least 6+ years directly supporting IC or DoD cybersecurity certification/accreditation, security engineering, or RMF/CSRMC activities.
• DoD 8140 IASAE Level II (or equivalent) certification: CISSP, CASP+, or CSSLP (current and maintained).
• Active TS/SCI clearance required; CI Poly highly preferred.
• Valid state driver’s license
• Successfully pass background and drug screening

Responsibilities

• Lead and support cybersecurity A&A activities, including RMF/CSRMC execution, for multiple systems on unclassified and TS/SCI domains, ensuring compliance with DoD, Army, and IC requirements (e.g., ICD 503).
• Develop, review, and maintain security documentation and artifacts, including System Security Plans (SSPs), security control implementation, risk assessments, and accreditation packages.
• Conduct security control assessments, Security Test and Evaluation (STE), Cybersecurity Test and Evaluation (CTE), technical vulnerability scanning, configuration assessments, and penetration testing; analyze results and manage POA&Ms with effective risk mitigations.
• Perform security engineering for new/existing systems: design and integrate hardware, OS, software, and network solutions that meet categorized security requirements and controls (including support for DevSecOps pipelines where applicable).
• Support continuous monitoring, security metrics reporting, integration testing of safeguards, and ongoing compliance audits/inspections.
• Analyze information sensitivity, data flows, and threats to recommend and implement risk-based security designs, including zero-trust principles where relevant.
• Assist in developing and updating security policies, procedures, and risk management strategies.
• Collaborate with government stakeholders to ensure baselines meet domain standards and authorization-to-connect requirements; provide technical guidance and briefings as needed.
• Support Cross Domain Solution (CDS) assessments and other specialized cybersecurity engineering tasks.
• Provide onsite support in the Reston, VA SCIF at least 4 days per week; occasional after-hours or on-call support may be required.
• Other duties as assigned

Skills

RMF/CSRMC

A&A

Security engineering

NIST/CNSSI controls

DevSecOps

Cross Domain Solutions

DoD/IC policies

Education

Bachelor's degree in CS/IA/Cybersecurity/Engineering

Tools

ACAS/Tenable

SCAP

Nessus

Job description

Chenega MIOS in Reston, VA seeks a Senior Information Systems Security Engineer to lead RMF/CSRMC activities across multiple systems, ensuring DoD/IC compliance while integrating secure design into system lifecycles. The role emphasizes A&A, CDS considerations, and continuous monitoring in a high-tempo environment.

You will develop SSPs, perform vulnerability assessments, and collaborate with government stakeholders to align baselines with domain standards, including DevSecOps integrations and