Senior DoD Cyber Security Engineer - RMF/SDLC

RPMGlobal; Bethesda (MD); On-site; USD 120,000 - 150,000; Full time

Job summary

RPMGlobal is seeking an experienced security engineer to support the design, development, and implementation of secure DoD systems within on-premises infrastructure. You will drive RMF activities, ensure compliance with DoD guidance, and manage vulnerability scanning and security automation across the system lifecycle.

The role requires TS/SCI with CI polygraph eligibility, a DoD IASAE II certification, and strong expertise in RMF, NIST guidelines, and secure software development practices.

Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor's degree with a minimum of ten years of experience in the category field.
• At least one DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE.

Responsibilities

• Support secure architecture, design, and implementation of DoD systems per DoDI 8510.01 and NIST SP 800-53.
• Lead integration of RMF activities into the SDLC, including controls selection and validation.
• Develop and maintain SSPs, SARs, risk assessments, and POA&Ms.
• Apply STIGs and validate compliance using SCAP and STIG Viewer.
• Maintain scanning infrastructure and analyze vulnerabilities for mitigation or risk acceptance.
• Support system authorization, incident response, forensics, and security automation.

Skills

Security architecture

RMF integration

SDLC

Vulnerability scanning

DoD guidance

Scripting languages

Clouds (unknown)

CI/CD

SCAP/STIG

Familiarity with NIST/ CNSSI

Education

Bachelor's degree + 10 years experience

Master's degree + 10 years experience

PhD + 10 years experience

Tools

XACTA

eMASS

SCAP

Fortify

OWASP

SonarQube

Job description

RPMGlobal is seeking an experienced security engineer to support the design, development, and implementation of secure DoD systems within on-premises infrastructure. You will drive RMF activities, ensure compliance with DoD guidance, and manage vulnerability scanning and security automation across the system lifecycle.

The role requires TS/SCI with CI polygraph eligibility, a DoD IASAE II certification, and strong expertise in RMF, NIST guidelines, and secure software development practices.