Senior DoD Cyber Security Engineer (RMF/SDLC)

Base-2 Solutions, LLC.; Bethesda (MD); Hybrid; USD 120,000 - 170,000; Full time

Job summary

RPMGlobal seeks a security-focused engineer to design, develop, and implement secure DoD systems. You will integrate RMF activities into the SDLC, deploy security controls, and coordinate risk assessments across systems.

Responsibilities include developing SSPs/SARs, applying STIGs, and supporting incident response and forensics. A TS/SCI clearance and DoD experience are required, with certifications like CISSP/CASP+ CE strongly preferred.

Qualifications

• Bachelor's degree with 10+ years in cyber or DoD fields.
• Active TS/SCI with CI Polygraph preferred or obtainable.
• IASAE II certification such as CISSP or CASP+ CE required.
• Experience reviewing vulnerabilities and building mitigations.
• Ability to deploy vulnerability scanning and RMF+ aligned controls.
• Strong Windows/Linux knowledge and networking fundamentals.

Responsibilities

• Support secure DoD system architecture, design, and implementation.
• Lead RMF activities within the SDLC and validate controls.
• Develop SSPs, SARs, risk assessments, and POA&M updates.
• Apply STIGs, perform scans, and analyze findings for remediation.
• Support authorization, incident response, and forensics activities.

Skills

RMF / SDLC integration

DoD cybersecurity

Vulnerability assessment

Security architecture

Scripting / programming

Cloud/on-prem security

Education

Bachelor's degree + 10 years

Master's degree + 10 years

PhD + 10 years

Tools

OWASP

Fortify

SonarQube

Tenable

SCAP

STIG Viewer

ACAS

XACTA / eMASS

Jira

Confluence

Kubernetes

Job description

RPMGlobal seeks a security-focused engineer to design, develop, and implement secure DoD systems. You will integrate RMF activities into the SDLC, deploy security controls, and coordinate risk assessments across systems.

Responsibilities include developing SSPs/SARs, applying STIGs, and supporting incident response and forensics. A TS/SCI clearance and DoD experience are required, with certifications like CISSP/CASP+ CE strongly preferred.