Cybersecurity Engineer - DoD RMF & Authorization

Fuse Integration • San Diego, CA

1d • $120,000 - $160,000

About The Position

Fuse is seeking a Cybersecurity Engineer to support the development, integration, and testing of secure communications networks for U.S. defense agencies. The role leads and supports Department of Defense Risk Management Framework (RMF) activities across information-system development, testing, authorization, and operational lifecycles. It requires in-depth experience with Linux and virtualized systems, along with the ability to work in a dynamic engineering environment and collaborate with systems, software, and network engineers and government stakeholders.

The engineer develops and maintains authorization packages for Authorizations to Operate (ATOs), Interim Authorizations to Test (IATTs), and continuing authorization activities. The work includes preparing and maintaining System Security Plans, security-control implementation statements, Plans of Action and Milestones, inventories, architecture documentation, assessment evidence, and other RMF artifacts in eMASS. The engineer analyzes security-control implementations and system configurations against applicable DoD and NIST requirements, interprets vulnerability and compliance assessments, supports security assessments and continuous monitoring, and advises engineering teams on secure configurations, hardening, network security, virtualization, and remediation.

The position calls for 6–8 years of relevant professional experience, demonstrated DoD RMF authorization experience, strong technical writing and coordination skills, U.S. citizenship, and an active Secret clearance. Fuse is a veteran-owned, rapidly growing small business founded in 2010 and based in San Diego. Its products support warfighters operating in airborne, maritime, and ground environments.

Requirements

• 6–8 years of professional experience in DoD cybersecurity, information assurance, systems administration, network engineering, or related technical disciplines.
• Demonstrated experience supporting DoD RMF authorization activities, including developing and maintaining ATO and/or IATT packages.
• Hands-on experience developing and maintaining RMF documentation, including SSPs, security-control implementation statements, POA&Ms, and assessment artifacts.
• Experience using eMASS to document security controls, manage authorization artifacts, track assessment findings, and maintain RMF packages.
• Strong working knowledge of NIST SP 800-53, DoD RMF requirements, and security-control implementation and assessment methodologies.
• Experience interpreting DISA STIG requirements, vulnerability assessment results, and system security configurations to assess compliance and recommend remediation.
• Experience reviewing technical system configurations, network architectures, and security-control implementations for RMF documentation.
• Working knowledge of Linux and Windows operating systems, including administration, security hardening, access controls, and configuration management.
• Familiarity with virtualized environments such as VMware, KVM, or Hyper-V and related cybersecurity considerations.
• Understanding of networking fundamentals, including TCP/IP, VLANs, subnets, firewalls, routing, network segmentation, and secure communications.
• Ability to analyze cybersecurity findings, document technical risks, and communicate remediation requirements to engineering teams and government stakeholders.
• Strong technical writing skills and ability to produce clear, accurate, technically defensible security documentation.
• Ability to independently manage multiple RMF deliverables, coordinate across engineering disciplines, and meet authorization milestones.
• Ability to meet applicable DoD 8140 cybersecurity workforce qualification requirements for the assigned work role.
• U.S. citizenship.
• Active Secret security clearance.

Nice To Haves

• Experience independently managing DoD RMF authorization packages from initial system categorization through authorization and continuous monitoring.
• Experience supporting successful ATO/IATT submissions, security assessments, and authorization package reviews.
• Familiarity with Navy, Marine Corps, or Air Force RMF authorization processes and service-specific requirements.
• Experience supporting cybersecurity accreditation of RDT&E systems, developmental systems, or operational DoD capabilities.
• Experience coordinating directly with SCAs, AOs, government ISSMs, and other authorization stakeholders.
• Experience performing security-control inheritance analysis, defining system authorization boundaries, and identifying applicable overlays and control-tailoring requirements.
• Experience using ACAS, Nessus, SCAP, STIG Viewer, and other vulnerability-assessment or compliance tools.
• Experience implementing DISA STIGs and hardening Linux, Windows, networking equipment, and virtualized environments.
• Familiarity with DoDI 8510.01, NIST SP 800-37, CNSSI 1253, and applicable DoD continuous-monitoring guidance.
• Knowledge of Navy C4ISR systems, military networks, or tactical data links.
• Experience supporting cybersecurity requirements within Agile software development or systems engineering environments.
• Experience assessing cybersecurity risks associated with custom software, specialized hardware, or mission-specific system architectures.

Responsibilities

• Lead and support DoD RMF execution for information systems throughout development, testing, authorization, and operational lifecycles.
• Develop, maintain, and manage RMF authorization packages supporting ATOs, IATTs, and ongoing authorization activities.
• Prepare and maintain SSPs, security-control implementation statements, POA&Ms, hardware and software inventories, system architecture documentation, and other RMF artifacts.
• Manage authorization packages in eMASS and maintain accurate, complete security-control documentation, assessment evidence, and supporting artifacts.
• Analyze and document security-control implementations in accordance with NIST SP 800-53, DoDI 8510.01, CNSSI 1253, DISA STIGs, and applicable DoD policies.
• Coordinate with ISSMs, ISSOs, SCAs, AOs, and government representatives to support security assessments and authorization decisions.
• Evaluate system architectures, configurations, and operational environments to determine control applicability, implementation approaches, and compliance requirements.
• Review ACAS, Nessus, SCAP, and STIG assessment results; identify deficiencies and risks; and recommend remediation.
• Develop, maintain, and track POA&Ms, coordinating with engineering teams on vulnerability resolution, mitigating factors, and risk acceptance decisions.
• Support SCA activities by preparing evidence, responding to findings, coordinating technical demonstrations, and resolving documentation deficiencies.
• Develop and execute continuous-monitoring activities to maintain cybersecurity posture and authorization status.
• Assess proposed system modifications, software updates, and configuration changes for impacts on security controls, authorization boundaries, and ATO/IATT conditions.
• Collaborate with systems, software, and network engineers to incorporate cybersecurity requirements into design, development, integration, and testing.
• Provide technical guidance on secure configurations, operating-system hardening, network security, virtualization, and vulnerability remediation.

Benefits

• Medical, dental, and vision coverage; employee coverage is fully funded and a portion of dependent coverage is funded.
• 11 paid Federal Holidays.
• Paid time off: 10 accrued days per year from date of hire through the second year; unlimited PTO after two years.
• 40 hours of paid sick leave per year.
• 401(k) with employer matching.
• Annual bonuses.
• Cell phone reimbursement of $100 per month.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed