Security Engineer (RMF)

CACI • Frederick, MD

2d

About The Position

We are seeking a skilled Security Engineer (RMF) to support the Defense Intelligence Agency (DIA) at the National Center for Medical Intelligence (NCMI) in Ft. Detrick, Maryland. This role focuses on implementing and managing cybersecurity for IT systems using the Risk Management Framework (RMF), ensuring systems meet federal and DoD security standards to achieve and maintain Authority to Operate (ATO). The Security Engineer will work closely with System Owners, Information System Security Officers (ISSOs), and Enterprise ISSMs to develop security documentation, apply compliance controls, and support the full system lifecycle from design through authorization.

Requirements

• TS/SCI with the ability to successfully pass a Polygraph exam.
• DoD 8570 IAT Level II or higher (e.g., Security+, GSEC) certification.
• Experience with Cybersecurity, system engineering, or related field.
• Proven experience executing RMF and supporting ATOs in DoD or intelligence environments.
• Technical Expertise with TCP/IP, Windows/Linux security, Solarwinds, Splunk, STIG Viewer, ACAS, Nessus and eMASS.
• Experience with NIST RMF, DoD Instructions (DoDI 8510.01, 8500.01, 8500.02), ICD 503.
• Familiarity with USG C2S cloud environments.
• BS degree in Computer Science, Data Science, Math, or a Medical field with 8 years of experience.

Nice To Haves

• Experience in medical or intelligence organizations.
• Experience integrating COTS into GOTS applications.
• Familiarity with NIST SP 800-144, 800-145, and other relevant cybersecurity publications.

Responsibilities

• Documentation - Develop and maintain RMF artifacts including System Security Plans (SSP), Security Assessment Reports (SAR), Security Assessment Plans (SAP), and Plans of Action and Milestones (POA&M).
• Compliance & Hardening - Apply DISA STIGs/SRGs, implement NIST 800-53 controls, and perform system hardening across Windows/Linux environments.
• Assessment & Remediation - Conduct vulnerability scans using tools like Nessus, ACAS, and SCAP. Analyze scan results and manage remediation efforts to reduce risk.
• Authorization Support - Support the Assessment & Authorization (A&A) process to obtain and sustain ATOs. Manage XACTA data requirements and ensure alignment with DIA RMF processes.
• Continuous Monitoring - Perform ongoing security monitoring and reporting to maintain system compliance and health. Review logs and alerts using tools such as Splunk and SolarWinds.
• Coordination & Collaboration - Work closely with System Owners, ISSOs, Enterprise ISSMs, and other engineering teams to develop security plans, respond to incidents, and ensure consistent implementation of cybersecurity policies.
• DevOps & System Support - Maintain DevOps pipelines, manage deployments, and support integration and production environments. Handle outages, account management, and security updates.

Benefits

• Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees