Senior RMF Security Engineer - DoD/Navy Onsite

Leidos LLC; San Diego (CA); On-site; USD 131,000 - 237,000; Full time

Benefits offered by this job

Paid Time Off

11 paid Holidays

401K with 6% company match

Flexible Schedules

Education and Training Support

Parental Paid Leave

Job summary

Leidos is seeking a Sr. RMF Security Engineer for a Navy base in San Diego. The role focuses on guiding RMF lifecycle activities, selecting and implementing security controls, and ensuring continuous monitoring and compliance with DoD requirements.

The ideal candidate will perform risk assessments, manage SSP/SAR/POA&M artifacts, and address vulnerabilities using SAST/DAST approaches, while collaborating with mission-focused teams on-site.

Qualifications

• Deep knowledge of RMF lifecycle and DoD cybersecurity requirements.
• Experience with SSP, SAR, and POA&M documentation.
• Experience with vulnerability scanning and risk assessments.
• Experience with NIST SP 800-37/53/171 and DIARMF.
• Active DoD Secret clearance and US citizenship.

Responsibilities

• Guide RMF lifecycle: categorize systems and select controls.
• Assess control effectiveness and perform continuous monitoring.
• Identify vulnerabilities and address compliance gaps.
• Recommend mitigations via config changes or tooling.
• Serve as technical advisor bridging policy and implementation.

Skills

RMF Security

NIST 800-53

DIARMF

eMASS

STIG compliance

SAST

DAST

Nessus

Penetration testing

Vulnerability remediation

Education

Bachelor’s degree

MS preferred

Tools

eMASS

Nessus

Tenable.sc

OpenSCAP

Job description

Leidos is seeking a Sr. RMF Security Engineer for a Navy base in San Diego. The role focuses on guiding RMF lifecycle activities, selecting and implementing security controls, and ensuring continuous monitoring and compliance with DoD requirements.

The ideal candidate will perform risk assessments, manage SSP/SAR/POA&M artifacts, and address vulnerabilities using SAST/DAST approaches, while collaborating with mission-focused teams on-site.