Cybersecurity Validation & Test Engineer; DoD RMF

Overview Amyx is seeking Cybersecurity Validation and Test Engineer to support the Defense Logistics Agency (DLA) by performing cybersecurity control validation, security assessment, testing, and compliance activities across enterprise applications, systems, and environments.

This position is responsible for evaluating the effectiveness of implemented security controls, supporting Risk Management Framework (RMF) activities, conducting security assessments, and assisting with authorization and compliance efforts. The specialist works closely with cybersecurity personnel, engineers, developers, system administrators, and government stakeholders to identify security risks, validate corrective actions, and ensure compliance with Department of Defense (DoD) cybersecurity requirements.

The successful candidate will possess strong analytical, troubleshooting, and cybersecurity assessment skills with the ability to balance security requirements against operational and business needs.

Responsibilities

• Conduct cybersecurity control validation and security assessment activities for enterprise applications, systems, and environments.
• Evaluate implemented security controls to determine effectiveness and compliance with DoD and federal cybersecurity requirements.
• Support RMF activities, security authorization efforts, and cybersecurity compliance initiatives.
• Perform vulnerability assessments, security reviews, and risk analysis activities.
• Validate remediation efforts and evaluate proposed mitigations for identified security findings.
• Support eMASS documentation, artifact collection, control assessments, and package maintenance activities.
• Collaborate with engineers, developers, system administrators, and stakeholders to identify and resolve security concerns.
• Analyze security risks and provide recommendations for improving security posture while balancing business and operational requirements.
• Develop assessment reports, testing documentation, findings summaries, and compliance-related deliverables.
• Support AMPS modernization efforts and cybersecurity initiatives through security testing, requirements analysis, and risk evaluation activities.
• Must have the ability to communicate accurate information

Required:

• Sensitivity Level: Non-Critical Sensitive
• Must possess or be able to obtain an IT-II Non-Critical Sensitive (Tier 3/T3) determination prior to onboarding.
• 3+ years of experience supporting cybersecurity assessment, control validation, compliance, or related security functions.
• 3+ years of experience working with DoD 8500-series guidance, NIST SP 800-53, and Risk Management Framework (RMF) principles.
• 2+ years of experience supporting eMASS activities.
• Experience conducting security assessments, control validation, vulnerability assessments, or risk analysis activities.
• Experience evaluating security controls and validating remediation or mitigation efforts.
• Experience analyzing security risks and balancing business requirements with cybersecurity requirements.
• Experience supporting system authorization, compliance, or cybersecurity governance activities.
• Knowledge of network security concepts and security control implementation.
• Proficiency with Microsoft Office Suite, including Word, Excel, Access, and PowerPoint.
• Strong analytical, troubleshooting, and problem-solving skills.
• Strong written and verbal communication skills.

Desired:

• Experience supporting RMF-authorized environments within the Department of Defense.
• Experience supporting Security Control Assessor (SCA), ISSO, ISSM, or cybersecurity compliance activities
• Experience conducting vulnerability assessments using automated scanning and security assessment tools.
• Experience supporting security testing for enterprise applications, infrastructure, or identity management solutions.
• Experience reviewing Security Plans (SSPs), POA&Ms, Security Assessment Reports (SARs), and other RMF documentation.
• Experience supporting cybersecurity efforts within the Defense Logistics Agency (DLA), Department of Defense (DoD), or other federal government customers.
• Familiarity with Zero Trust Architecture principles and cybersecurity modernization initiatives.
• Experience supporting cloud-based or hybrid environments.
• Experience evaluating security requirements throughout the system development lifecycle.
• Experience working with engineers, developers, and system administrators to implement corrective actions and improve system security.
• Relevant cybersecurity certifications such as Security+, CySA+, CASP+,…