TS/SCI Cyber Security Engineer - RMF & DoD

Xcelerate Solutions; Bethesda (MD); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Xcelerate Solutions is seeking a Cyber Security Engineer to design, develop, and implement secure systems across the DoD RMF framework, supporting NMEC. The role is based in Bethesda, MD with a hybrid on-site schedule.

You will collaborate with ISSOs/ISSMs, developers, and system owners to ensure secure configurations, perform RMF activities in the SDLC, and apply guidance like STIGs using SCAP tools.

Qualifications

• BS degree or equivalent with 8+ years of cybersecurity experience.
• Active TS/SCI clearance with ability to obtain a poly.
• DoD RMF integration and security controls in SDLC.
• Experience reviewing vulnerabilities and guiding remediation.
• Scripting/Coding in Python or Bash preferred.

Responsibilities

• Support secure architecture, design, and DoD-compliant systems.
• Lead RMF activities across the SDLC and validate security controls.
• Develop SSPs, SARs, risk assessments, and POA&Ms.
• Collaborate with ISSOs/ISSMs, developers, and system owners on secure configurations.
• Apply STIGs and validate with SCAP, STIG Viewer, and ACAS.
• Maintain scanning infrastructure and asset updates.
• Analyze vulnerability scans and mitigate risks per DoD policy.
• Provide input to system authorization and RMF artifacts.
• Participate in reviews to embed cybersecurity early in design.
• Develop automation to improve compliance and monitoring.
• Support incident response and forensics with ISSMs.

Skills

RMF Process

Security Controls

Vulnerability Scanning

8570 IASAE II

Scripting (Python/Bash)

Windows/Linux

Education

BS degree or higher

Tools

SCAP

STIG Viewer

ACAS

XACTA

EMass

Jenkins

GitlabCI

Tenable

OWASP

Fortify

Job description

Xcelerate Solutions is seeking a Cyber Security Engineer to design, develop, and implement secure systems across the DoD RMF framework, supporting NMEC. The role is based in Bethesda, MD with a hybrid on-site schedule.

You will collaborate with ISSOs/ISSMs, developers, and system owners to ensure secure configurations, perform RMF activities in the SDLC, and apply guidance like STIGs using SCAP tools.