Security Engineer

We are looking for a Security Engineer that supports the DoD by providing senior-level security engineering expertise for Risk Management Framework (RMF) authorization, continuous monitoring, and sustainment activities. This role ensures JTMS capabilities operate in compliance with DoD cybersecurity policies within a cloud-based Dev Sec Ops  environment, enabling secure, authorized, and mission-reliable system operations.

• Develop, review, and maintain RMF artifacts and system authorization documentation supporting accreditation and sustainment.
• Manage eMASS entries, security control evidence, and Plans of Action and Milestones (POA&Ms).
• Conduct vulnerability assessments, analyze findings, and recommend risk-based mitigations.
• Support integration of security controls and best practices within a Dev Sec Ops  delivery environment.
• Coordinate security activities with Government stakeholders, DISA, and contractor security teams.

• Bachelor's degree or equivalent relevant experience.
• Minimum of seven (7) years of cybersecurity or security engineering experience.
• One or more of the following certifications: CCISO, CISA, CISM, CISSP, CISSP-ISSEP, CySA+, GSLC, or GSNA.
• Demonstrated hands-on experience with RMF and eMASS.
• Experience with STIG implementation, vulnerability scanning, and POA&M management.

• Experience with system integration, data migration, and master data management in ERP environments.
• Familiarity with RMF, cloud security, and FedRAMP considerations for SaaS solutions.
• Experience supporting Agile or SAFe governance for COTS/SaaS implementations.
• Cloud security experience in environments such as AWS, Azure GCC High, or similar.
• Experience supporting joint or enterprise DoD systems.