> Markdown version of [/jobs/ext/3835473-security-engineer](https://www.wearedevelopers.com/jobs/ext/3835473-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - **Company:** Conviso Inc. - **Location:** Mundelein, IL, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Xacta, Software Documentation, Information Systems, Network Administration, Security Content Automation Protocol, SC Clearance, Plan of Action and Milestones - **Published:** October 19, 2026 - **Apply:** https://www.thejobnetwork.com/job/392ac2ca-3d98-467a-96b2-83a9c6b504d9/security-engineer ## About the Role The successful candidate will interpret security and compliance risks, recommend practical approaches to meeting federal cybersecurity requirements, and support the full RMF lifecycle from preparation and categorization through control implementation, assessment, authorization, and continuous monitoring. The role requires strong technical judgment, experience with eMASS and related A&A platforms, and the ability to work effectively with highly technical system and network administrators., Minimum 5 years of experience in Risk Management Framework, cybersecurity engineering, security engineering, or a related technical discipline. \n Thorough understanding of the federal RMF Assessment and Authorization process, including all phases of the RMF lifecycle. \n Experience mapping, implementing, interpreting, and documenting RMF security controls. \n Experience developing and submitting ATO packages. \n Experience supporting POA&M management, ST&E activities, system documentation, authorization activities, risk assessments, third-party audits, NIST SP 800-53 compliance, and threat assessments. \n Proven ability to plan and monitor security control implementation for networks, enclaves, and information systems. \n Experience generating and interpreting ACAS scans to identify vulnerabilities and monitor remediation activities. \n Working knowledge and experience implementing and evaluating manual STIGs, SCAP, and SCC. \n Working knowledge of common A&A platforms, including eMASS, CSAM, Xacta, or comparable tools. \n Strong understanding of DoD cybersecurity, privacy, compliance, and risk management requirements. \n Strong written and verbal communication skills, including the ability to work effectively with highly technical administrators and other stakeholders. \n Active Secret clearance required., Ability to manage multiple priorities, maintain accurate security documentation, and support time-sensitive authorization milestones. ## Description We are seeking an RMF Security Engineer to provide end-to-end Assessment and Authorization (A&A) support for a Department of Defense cybersecurity environment. This role will support the implementation, testing, monitoring, and enforcement of cybersecurity, privacy, and financial controls in accordance with the NIST Risk Management Framework (RMF), NIST SP 800-53 controls, and applicable DoD policies.