Senior Information Security Engineer – RMF & Secure Cloud

Apavo Corporation; Arlington (VA); On-site; USD 130,000 - 180,000; Full time

Job summary

Apavo Corporation, based in Arlington, VA, seeks a Senior Information Systems Security Engineer (ISSE) to provide expert security engineering across the system lifecycle. You will integrate RMF controls, lead A&A activities, and support authorization decisions with engineering teams and ISSOs.

You will mentor junior engineers, develop system security documentation, and coordinate with program leadership on risk mitigation while staying current on evolving threats in defense-grade environments.

Qualifications

• Bachelor's degree with 8+ years of cybersecurity experience.
• Must lead RMF/A&A processes on complex systems.
• Active TS/SCI clearance; TS/SCI eligible.
• DoD 8570/8140-compliant certification required (CISSP preferred).
• Strong knowledge of NIST RMF and NIST SP 800-53/800-37.
• Experience with vulnerability scanning, secure baselines, and hardening.
• Experience with cloud security and Zero Trust concepts.
• Effective communication with senior leadership.

Responsibilities

• Provide senior-level security engineering across the SDLC.
• Lead RMF/A&A activities and produce security artifacts.
• Conduct security control assessments and remediation strategies.
• Advise on secure design options and risk mitigation.
• Oversee continuous monitoring, vulnerability management, and patching.
• Develop BoE packages and security documentation.
• Coordinate with ISSMs, AOs, and stakeholders on approvals.
• Mentor junior security engineers and improve processes.
• Stay current on threats, vulnerabilities, and mitigations.

Skills

RMF/A&A leadership

Security engineering

Vulnerability management

Strong communication

Stakeholder leadership

Education

Bachelor's degree

DoD 8570/8140 certification

Tools

Vulnerability scanning tools

Secure configurations

Zero Trust concepts

Cloud security principles

Job description

Apavo Corporation, based in Arlington, VA, seeks a Senior Information Systems Security Engineer (ISSE) to provide expert security engineering across the system lifecycle. You will integrate RMF controls, lead A&A activities, and support authorization decisions with engineering teams and ISSOs.

You will mentor junior engineers, develop system security documentation, and coordinate with program leadership on risk mitigation while staying current on evolving threats in defense-grade environments.