TS/SCI Cyber Security Engineer — RMF+ DoD Compliance

Cybersecurity Jobs; Bethesda (MD); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Premium health benefits

401(k) with matching

Job summary

Cybersecurity Jobs is seeking a security engineer to support DoD RMF and Secure SDLC across on‑prem DoD systems. You will design secure architectures, implement controls, and develop SSPs/SARs while ensuring compliance with DoDI 8510.01 and NIST 800-53.

The role requires TS/SCI with CI Poly, IASAE II level certs (CISSP family), scripting experience, and strong Windows/Linux, networking, and CI/CD knowledge.

Qualifications

• Active TS/SCI with CI Polygraph eligibility is required.
• Minimum 6 years in the cyber or DoD security field; degree optional with substitutions.
• DoD 8570.01-M IASAE Level II certification required (CISSP/CISSP-ISSAP/CISSP-ISSEP/CSSLP/CASP+).
• Experience reviewing vulnerabilities and building mitigations across systems.
• Familiarity with RMF+/RMF process and SDLC integration.

Responsibilities

• Support secure architecture, design, and DoD system implementation.
• Lead RMF activities within SDLC including controls selection and validation.
• Develop SSPs, SARs, risk assessments, and POA&Ms.
• Apply STIGs and validate with SCAP, STIG Viewer, ACAS.
• Maintain vulnerability scanning and support risk decisions.
• Support DoD/IC system authorization, incident response, and forensics.

Skills

DoD security architecture

RMF+ integration

Vulnerability assessment

Scripting basics

CI/CD

Windows/Linux

NIST 800-53

Education

Bachelor’s degree

Tools

SCAP

OSS tooling

eMASS

XACTA

CISSP family certs

Job description

Cybersecurity Jobs is seeking a security engineer to support DoD RMF and Secure SDLC across on‑prem DoD systems. You will design secure architectures, implement controls, and develop SSPs/SARs while ensuring compliance with DoDI 8510.01 and NIST 800-53.

The role requires TS/SCI with CI Poly, IASAE II level certs (CISSP family), scripting experience, and strong Windows/Linux, networking, and CI/CD knowledge.