Senior DoD Cybersecurity Engineer (RMF/SDLC Expert)

RPMGlobal; Bethesda, Northern (MD, KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

RPMGlobal seeks an experienced DoD cybersecurity professional to design, develop, and implement secure DoD systems compliant with RMF+ and DoDI 8510.01. You will lead RMF integration within the SDLC, maintain security artifacts, and drive vulnerability management across Windows and Linux platforms.

Experience with XACTA/eMASS, STIGs, and SCAP is essential, along with a DoD 8570 IASAE II certification. This role requires active TS/SCI clearance and a strong background in security across

Qualifications

• Active TS/SCI with ability to obtain a CI Polygraph.
• Bachelor's degree with a minimum of six years of experience; three additional years may substitute for the degree.
• At least one DoD 8570.01-M IASAE Level II certification: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE.
• Developer experience in at least one scripting or programming language.
• Experience reviewing cybersecurity vulnerabilities across systems and building mitigation plans.
• Ability to architect and deploy vulnerability scanning solutions (OWASP, Fortify, SonarQube, Tenable).
• Experience with XACTA, eMASS or similar tools.
• Strong understanding of Windows and Linux/UNIX operating systems.
• Experience with middleware/web technologies, databases, TCP/IP, and CI/CD.
• Familiarity with NIST 800-171/800-172, NIST SSDF, CMMC, CNSSI 1253.
• Experience supporting DoD/IC systems through the RMF+ process.

Responsibilities

• Support secure architecture, design, and DoD system implementation per DoDI 8510.01 and NIST 800-53.
• Lead integration of RMF activities into SDLC, including selection, implementation, and validation of security controls.
• Develop and maintain SSPs, SARs, risk assessments, and POA&Ms.
• Apply STIGs and validate compliance using SCAP, STIG Viewer, and ACAS.
• Maintain scanning infrastructure and analyze vulnerabilities for mitigation or risk acceptance.
• Support system authorization, incident response, forensics analysis, and security automation efforts.

Skills

TS/SCI clearance

DoD 8570 IASAE II

CISSP/CISSP-ISSAP/CISSP-ISSEP/CSSLP/CA

Scripting/programming

Vulnerability management

RMF+ / RMF process

Windows/Linux

CI/CD / networking

NIST 800-171/172, CNSSI 1253

DoD/IC systems experience

Education

Bachelor's degree

HS Diploma/GED with 9y exp

Associates degree with 9y exp

Master's degree with 6y exp

PhD with 6y exp

Tools

XACTA

eMASS

SCAP

STIG Viewer

Tenable

Job description

RPMGlobal seeks an experienced DoD cybersecurity professional to design, develop, and implement secure DoD systems compliant with RMF+ and DoDI 8510.01. You will lead RMF integration within the SDLC, maintain security artifacts, and drive vulnerability management across Windows and Linux platforms.

Experience with XACTA/eMASS, STIGs, and SCAP is essential, along with a DoD 8570 IASAE II certification. This role requires active TS/SCI clearance and a strong background in security across