Senior IA Engineer: RMF & Vulnerability Expert

CompQsoft Inc; Fort Meade, Northern (MD, KY); Hybrid; USD 110,000 - 140,000; Full time

Job summary

CompQsoft Inc. seeks an Information Assurance (IA) Engineer to join the DISA program team in Fort Meade, MD. The role focuses on vulnerability assessments using ACAS and SCAP, identifying security risks, and coordinating remediation with engineers and security personnel.

The ideal candidate has 10+ years in cybersecurity, vulnerability management, or information assurance, with RMF/ATO experience and strong communication skills to convey findings to stakeholders.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related discipline.
• 10+ years of experience in cybersecurity, vulnerability management, or information assurance.
• Experience performing ACAS vulnerability scans (Tenable/Nessus).
• Experience executing SCAP Compliance Checker scans.
• Knowledge of vulnerability management processes and remediation lifecycle.
• Familiarity with TCP/IP, DNS, Active Directory, routing, and firewalls.
• Experience supporting RMF, Continuous Monitoring or ATO sustainment.
• Strong analytical and troubleshooting skills.
• Excellent written and verbal communication skills.
• Ability to work with engineers, administrators, and security teams.

Responsibilities

• Examine internal IT controls, evaluate the design and operational effectiveness, determine exposure to risk and develop remediation strategies for System Administrator (SA) implementation.
• Perform recurring and on-demand vulnerability assessments using ACAS (Tenable Security Center/Nessus) and SCAP Compliance Checker.
• Analyze vulnerability scan results to identify security weaknesses, misconfigurations, and compliance gaps.
• Prioritize vulnerabilities based on severity, exploitability, mission impact, and organizational risk.
• Partner with system engineers, network engineers, system administrators, and application owners to develop practical remediation and mitigation strategies.
• Test and identify network and system vulnerabilities and assist in creating counteractive strategies to protect the network.
• Validate remediation efforts through follow-up scans and technical analysis.
• Review scan findings to distinguish true positives from false positives and provide supporting technical justification.
• Prepare vulnerability assessment reports, risk summaries, metrics, and executive-level briefings.
• Track vulnerabilities through remediation lifecycle to ensure timely resolution.
• Support RMF activities, continuous monitoring, ATO sustainment, and cybersecurity compliance initiatives.
• Assist with implementation and validation of DISA STIGs and SRGs.
• Coordinate with ISSMs, ISSOs, engineering teams, and system owners to resolve security findings.
• Maintain documentation supporting POA&Ms, vulnerability tracking, and audit readiness.
• Review and monitor system security posture and requirements primarily outlined by CTOs, TASKORD, OPORD, IAVAs, STIGs and other orders.

Skills

ACAS

Nessus

SCAP

RMF

Vulnerability management

Information assurance

Networking basics

Communication skills

DoD/Federal experience

PowerShell

Education

Bachelor’s degree in Cybersecurity, CS, IT

Tools

Tenable Security Center

Nessus Manager

Tenable.sc

SCAP Compliance Checker

eMASS

Job description

CompQsoft Inc. seeks an Information Assurance (IA) Engineer to join the DISA program team in Fort Meade, MD. The role focuses on vulnerability assessments using ACAS and SCAP, identifying security risks, and coordinating remediation with engineers and security personnel.

The ideal candidate has 10+ years in cybersecurity, vulnerability management, or information assurance, with RMF/ATO experience and strong communication skills to convey findings to stakeholders.