> Markdown version of [/jobs/ext/2710765-principal-cyber-security-engineer](https://www.wearedevelopers.com/jobs/ext/2710765-principal-cyber-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Principal Cyber Security Engineer

- **Company:** ASRC FEDERAL
- **Location:** Colorado Springs, CO, United States
- **Experience:** Experienced
- **Salary:** $35,360.0 - $210,080.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Software Engineering, Verification and Validation (Software), SC Clearance, Plan of Action and Milestones
- **Published:** September 4, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9143389/principal-cyber-security-engineer

## About the Role

* Expert knowledge and experience in the development and processing of RMF Security Authorization Packages.
 * Typical education and experience: Bachelors and nine (9) years or more experience; Masters and seven (7) years or more experience; PhD or JD and four (4) years or more experience.
 * Active Secret clearance required.
 * Current CISSP CE or equivalent.
 * Expert understanding of cybersecurity principles, of enterprise-level networks, and software development.

Preferred Qualifications:

 * Expert knowledge of DoDI 8500.01, DoDI 8510.01, AFI 17-101, AFI 17-130, NIST SP 800-30, and NIST SP 800-37.
 * Experience and working knowledge of the GMASS-covered systems.

## Description

* Documents required RMF Package Deliverables as identified in DI-MGMT-82001A to be included for RMF Security Authorization Packages.
 * Prepares and maintains a System Categorization Memorandum IAW CNSSI 1253 for each GMASS-covered systems ATO Security Authorization Package.
 * Identifies, assesses, tracks, and reports risks and vulnerabilities for GMASS-covered systems IAW /USSF and DoD cybersecurity assurance requirements.
 * Prepares and maintains a Plan of Action and Milestones (POA&M) for each ATO package.
 * Collaborates with stakeholders to document, update, and maintain GMASS-covered systems RMF Security Authorization Packages in the Enterprise Mission Assurance Support Service (eMASS); including applicable artifacts, documentation, and controls as prescribed, and provide control verification and validation services to assure the same.


## Related Videos

- [The Avengers Initiative (Practical Ethics for Software Engineers)](https://www.wearedevelopers.com/videos/2070-the-avengers-initiative-practical-ethics-for-software-engineers)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [One Pipeline, Three Regulator - SBOM Compliance for the Developer](https://www.wearedevelopers.com/videos/100169-one-pipeline-three-regulator-sbom-compliance-for-the-developer)
- [Official Opening of WeAreDevelopers World Congress 2026](https://www.wearedevelopers.com/videos/100000-official-opening-of-wearedevelopers-world-congress-2026)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)