Senior RMF/ATO Cyber Engineer - Onsite (Herndon)

Insight Xcite; Herndon (VA); On-site; USD 170,000 - 230,000; Full time

Benefits offered by this job

100% employer-paid medical, dental, &

Annual Flex Bonus earning

Job summary

Insight Xcite is seeking a Cyber Security Systems Engineer (ISSE) at the Expert level for onsite work in Herndon, Virginia. Support RMF and ICD-503 assessment and authorization efforts, from initial system authorization through continuous monitoring.

Key responsibilities include developing RMF- and ICD-503-based security documentation, gathering artifacts, guiding systems through ATO processes, and enabling continuous monitoring with POA&M actions.

Qualifications

• 11+ years of ISSE experience.
• RMF and ICD-503 documentation, control evidence, A&A, ATO, continuous monitoring, and POA&M skills.
• Strong verbal and written communication, multitasking, and problem-solving skills.
• Ability to work independently and collaboratively.

Responsibilities

• Develop RMF and ICD-503 security documentation, including contingency plans.
• Gather and validate artifacts supporting security controls and closure of risk elements.
• Guide new systems through assessment and authorization phases toward an Authorization to Operate.
• Support continuous monitoring and convert risk findings into Plans of Action and Milestones (POA&M).
• Communicate technical and security requirements clearly with engineers, ISSMs, assessors, auditors, and other stakeholders.

Skills

Verbal communication

Written communication

Multitasking

Problem solving

Independent work

Collaborative work

Education

Bachelor’s or Master’s degree in a relevant technical discipline

Tools

Greenlight

Rapid7

WebInspect

Splunk

Job description

Insight Xcite is seeking a Cyber Security Systems Engineer (ISSE) at the Expert level for onsite work in Herndon, Virginia. Support RMF and ICD-503 assessment and authorization efforts, from initial system authorization through continuous monitoring.

Key responsibilities include developing RMF- and ICD-503-based security documentation, gathering artifacts, guiding systems through ATO processes, and enabling continuous monitoring with POA&M actions.