{"id":2473866,"url":"https://alion.io/job/agile-defense-cybersecurity-engineer-rmf-specialist","title":"Cybersecurity Engineer / RMF Specialist","company":{"id":716156,"name":"Agile Defense","domain":"agiledefense.com","url":"https://alion.io/company/agiledefense","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"B","score":81,"open_postings":36,"ghost_share":0,"stale_share":0.778,"repost_share":0,"time_to_fill_p50_days":41,"computed_at":"2026-10-27T05:46:45Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Columbus, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":94000,"max_usd":213000,"period":"year","method":"role_country_seniority_unknown","sample_n":3638},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"IAM","optional":false},{"name":"NIST 800-53","optional":false},{"name":"FedRAMP","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-10-13T17:58:46Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-27T14:49:49Z","board_verified":true,"closed_at":null,"days_open":13,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":13},"description":"Job Title: Cybersecurity Engineer / RMF Specialist\nLocation: Columbus, OH | Onsite\nClearance Level: Must be a US Citizen with the ability to obtain & maintain a Secret security clearance\nCertifications: Must meet DoD 8140.03 certification requirements for this role (IAM Level I), such as Security+ CE.\nJob Description\nWe're looking for a Cybersecurity Risk Management Framework (RMF) Specialist to help a federal customer document, assess, and strengthen the security posture of their building and facility control systems. These systems keep the installation running - building automation, utilities, metering, and more - and your work directly supports the customer's path to achieving and maintaining their Authority to Operate (ATO).\nThis is a documentation and assessment focused role working as part of a small on site cyber team. You'll partner closely with the Cyber Systems Administrator who leads the team, as well as with the government's remote cybersecurity organization, system owners, and engineering staff. Your job is to gather the right information from the right people, turn it into clear and defensible RMF artifacts, and keep the paperwork accurate as the environment evolves. If you enjoy connecting the dots between what's running in the field and what the compliance framework requires, this role is for you.\nJOB DUTIES AND RESPONSIBILITIES\nDevelop and maintain RMF documentation and security artifacts, including system diagrams, categorization documents, control implementation write-ups, and plans of action.\nCollect, consolidate, and organize technical information from system owners, engineers, and operations staff into audit-ready deliverables.\nSupport system categorization and risk assessment activities by preparing the supporting documentation and tracking input from stakeholders.\nReview vulnerability scan results and build out remediation plans (POA&Ms), tracking progress through to closure.\nAssist with STIG and security control checklists, documenting compliance status and exceptions.\nMaintain accurate inventories of hardware, software, and documentation in scope.\nCoordinate with the government's remote cybersecurity team, program managers, and security officers to ensure artifacts meet enterprise expectations.\nContribute to monthly reporting and recurring customer deliverables on time and in the required format.\nSupport phase in activities during ramp up, including capturing and validating documentation from the outgoing team.\nBasic Qualifications\nQUALIFICATIONS\nRequired Certifications\nMust meet DoD 8140.03 certification requirements for this role (IAM Level I), such as Security+ CE.\nRole-based computing environment certification (to be obtained before privileged access within 180 days of first day).\nEducation, Background, and Years of Experience\nHands on experience supporting the RMF process in a federal, DoD, or similarly complex environment.\nExperience producing security documentation and artifacts that have been reviewed by a government ISSM, auditor, or authorizing official.\nBachelor's degree is not required; candidates with equivalent experience, technical training, or industry certifications will be fully considered.\nRelevant experience may be gained through military service, technical roles in government or industry, or non-traditional career paths.\nADDITIONAL SKILLS & QUALIFICATIONS\nRequired Skills\nWorking knowledge of federal cybersecurity frameworks (FIPS 199/200, NIST 800-53, NIST 800-82, CNSSI 1253).\nFamiliarity with DoD cybersecurity tools for vulnerability scanning and compliance checking (ACAS, SCAP, etc.) and the ability to interpret their output.\nStrong written communication - able to turn technical input from engineers and operators into clear, defensible documentation.\nAttention to detail and comfort managing multiple deliverables against overlapping deadlines.\nAbility to coordinate with program managers, remote cybersecurity stakeholders, security officers, engineers, and vendors to gather what's needed.\nPreferred Skills\nExperience uploading and maintaining artifacts in eMASS or a similar RMF package management system.\nExperience with OT/ICS/SCADA or facility related control systems (e.g., building automation, advanced metering).\nKnowledge of the Purdue Enterprise Reference Architecture.\nExperience supporting ATO or ATC efforts from start to finish.\nFamiliarity with FedRAMP and Zero Trust principles.\nExperience with privacy documentation (PIA/PRiLA) or contingency plan artifacts.\nPrior DLA customer experience.","description_format":"text","description_chars":4524,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Digital Government","Managed Security"],"lifecycle":[{"event":"open","at":"2026-10-13T20:45:02Z"}],"visa":[],"liveness":{"score":65,"band":"ok","label":"Likely open","p_open":1,"p_active":0.647,"p_room":1,"age_days":13,"expected_fill_days":41,"reasons":["conf:3","stale_co","urgency","velocity","win:early","comp:brand"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/agile-defense-cybersecurity-engineer-rmf-specialist","json_url":"https://alion.io/job/agile-defense-cybersecurity-engineer-rmf-specialist.json","meta":{"generated_at":"2026-10-27T16:19:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5664,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":716156},"rest":"https://alion.io/mcp/rest/get_company?id=716156"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fagile-defense-cybersecurity-engineer-rmf-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fagile-defense-cybersecurity-engineer-rmf-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fagile-defense-cybersecurity-engineer-rmf-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/agile-defense-cybersecurity-engineer-rmf-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fagile-defense-cybersecurity-engineer-rmf-specialist"}]}