Senior DoD Cyber Security Engineer (TS/SCI) RMF Expert

RPMGlobal; Bethesda (MD); On-site; USD 120,000 - 160,000; Full time

Job summary

RPMGlobal is seeking a highly skilled cybersecurity professional to support DoD RMF activities across the NMEC/DOMEX Technology Platform. The role focuses on secure on-premises systems, lifecycle security integration, and rigorous vulnerability management.

The candidate will lead RMF integration into SDLC, implement DoD security controls, and develop required documentation such as SSPs and SARs, while maintaining scanning tools like SCAP and STIG Viewer.

Qualifications

• Active TS/SCI clearance with CI polygraph eligibility.
• Bachelor's degree with at least 6 years of DoD cybersecurity experience.
• DoD 8570.01-M IASAE Level II certification (CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE).
• Experience reviewing cybersecurity vulnerabilities and building remediation plans across systems.

Responsibilities

• Support secure architecture, design, and DoD system implementation per DoDI 8510.01 and NIST SP 800-53.
• Lead RMF integration into the SDLC, including control selection and validation.
• Develop SSPs, SARs, risk assessments, and POA&M.
• Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS.
• Maintain scanning infrastructure and analyze vulnerabilities for mitigation.
• Support DoD/IC system operations, incident response, forensics, and security automation.

Skills

Scripting

Vulnerability assessment

RMF/SDLC integration

Security guidance

CI/CD tooling

Education

Bachelor's degree

Associates degree

High School Diploma

Master's degree

Tools

XACTA

eMASS

SCAP

STIG Viewer

OWASP

Fortify

SonarQube

Tenable

Jira

Confluence

Job description

RPMGlobal is seeking a highly skilled cybersecurity professional to support DoD RMF activities across the NMEC/DOMEX Technology Platform. The role focuses on secure on-premises systems, lifecycle security integration, and rigorous vulnerability management.

The candidate will lead RMF integration into SDLC, implement DoD security controls, and develop required documentation such as SSPs and SARs, while maintaining scanning tools like SCAP and STIG Viewer.