> Markdown version of [/jobs/ext/2977133-cybersecurity-and-rmf-engineer-mid](https://www.wearedevelopers.com/jobs/ext/2977133-cybersecurity-and-rmf-engineer-mid). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cybersecurity and RMF Engineer, Mid - **Company:** Booz Allen Hamilton Inc. - **Location:** Arlington, VA, United States - **Experience:** Experienced - **Salary:** $69,400.0 - $158,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Systems Engineering, Microsoft Azure, Big Data, Cloud Computing Security, Cyber Security, DevOps, Identity and Access Management, Information Systems Security Architecture Professional, Information Systems Security Engineering Professional, Network Security, Software Vulnerability Management, Google Cloud, SC Clearance, Low-code, Devsecops, Vulnerability Analysis - **Published:** September 18, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9175919/cybersecurity-and-rmf-engineer-mid ## About the Role * 2+ years of experience with RMF, NIST 800-53, Zero T rus t, STIGs, vulnerability management, ATO packages, POA & Ms, continuous monitoring, or secure cloud * 2+ years of experience as an Information Systems Security Officer ( ISSO ) , Information Systems Security Engineer ( ISSE ) , or Information Systems Security Manager ( ISSM ) * Experience in cybersecurity engineering and RMF alignment for the solution, supporting secure architecture, controls implementation, scanning, evidence generation, POA & M tracking, and continuous monitoring in IL5-ready environments with scal ability to higher controls * Ability to work with development teams to select the most suitable controls * Secret clearance * HS diploma or GED Nice If You Have: * 2+ years of experience setting-up or working with DevSecOps pipeline security tools, scanning, and reporting * 2+ years of experience supporting and helping configure in a DevOps team * Experience developing SSP or ATO packages for systems deployed in a Micro sof t Azure, AWS, or DoD cloud environment * Bachelor's degree * Amazon Web Service ( AWS ) , Micro sof t Azure, or Google Cloud Service Provider Certification * DoD 8570 IAM II or higher Certification such as SecurityX, CISM, or CISSP Certification * DoD Directive 8570.01-M for IASAE Level III Certification such as CISSP-ISSAP, CISSP-ISSEP, or CCSP Certification ## Description Are you looking for an opportunity to share your experience in cybersecurity and systems engineering that will support the U.S. Air Force? As a systems security and network security engineer, you can identify the tools needed to assess vulnerabilities and recommend the best solution and security strategy. We need your experience to oversee the development and implementation of security solutions that will protect our military. On our team, you'll supervise a team as they troubleshoot and analyze complex challenges for customers using your knowledge of network and security devices, applications, and identifying tools. You'll manage the research of technology and market trends to further develop security solutions. Using your expertise in low-code / no-code systems and security protocols, you'll assess security threats and implement infrastructure controls. In this role, you'll directly impact Air Force human capital management by helping to secure our nation's human capital systems. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers. Work with us as we secure and protect the Air Force for the better. What You'll Work On: * Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management. * Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises. * Lead risk and vulnerability assessments in network, system, and application areas. * Leverage big data analytics and traditional security event types to identify advanced threats. ## Related Videos - [Shifting Stress to Progress— Understanding DevOps to do DevOps Better](https://www.wearedevelopers.com/videos/268-shifting-stress-to-progress-understanding-devops-to-do-devops-better) - [Alibaba Big Data and Machine Learning Technology](https://www.wearedevelopers.com/videos/37-alibaba-big-data-and-machine-learning-technology) - [Reimagining app development with Low-code and AI](https://www.wearedevelopers.com/videos/1651-reimagining-app-development-with-low-code-and-ai) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)