Cybersecurity Engineer - DoD RMF & Authorization

Who we are: Fuse builds innovative communications, networking, and computing solutions that improve the sharing of information, video, text, and voice among operators distributed throughout the airborne, maritime, and ground environments. We are a Technology firm creating in-house software, network and hardware solutions that support our noble cause of advancing warfighter capabilities with elegant, user-focused communications, networks, and software systems. About this role: Do you thrive in innovative, design-driven environments with a high level of both accountability and trust? Are you passionate about protecting computer and network systems from cyber attacks and vigilant about resolving vulnerabilities? If so - we want to hear from you! Fuse is currently developing, integrating, and testing secure communications networks for U.S. defense agencies that improve the sharing of information among warfighters distributed throughout airborne, maritime, and ground environments. Must have in-depth experience with Linux and virtualized systems. Duties And Responsibilities Lead and support the execution of the Department of Defense (DoD) Risk Management Framework (RMF) process for information systems throughout development, testing, authorization, and operational lifecyclesDevelop, maintain, and manage complete RMF authorization packages supporting Authorizations to Operate (ATOs), Interim Authorizations to Test (IATTs), and ongoing system authorization activitiesPrepare and maintain System Security Plans (SSPs), security control implementation statements, Plans of Action and Milestones (POA&Ms), hardware and software inventories, system architecture documentation, and other required RMF artifactsManage RMF authorization packages within Enterprise Mission Assurance Support Service (eMASS), ensuring security control documentation, assessment evidence, and supporting artifacts are accurate, complete, and maintained throughout the authorization lifecycleAnalyze and document security control implementations in accordance with NIST SP 800-53, DoDI 8510.01, CNSSI 1253, applicable DISA Security Technical Implementation Guides (STIGs), and DoD cybersecurity policiesCoordinate with Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), Security Control Assessors (SCAs), Authorizing Officials (AOs), and government representatives to support security assessments and authorization decisionsEvaluate system architectures, configurations, and operational environments to determine security control applicability, implementation approaches, and compliance requirementsReview and interpret vulnerability assessment results from ACAS, Nessus, SCAP, and STIG compliance assessments to identify security deficiencies, document associated risks, and develop remediation recommendationsDevelop, maintain, and track POA&Ms, coordinating with engineering teams to resolve identified vulnerabilities, document mitigating factors, and support risk acceptance decisionsSupport Security Control Assessment (SCA) activities by preparing assessment evidence, responding to findings, coordinating technical demonstrations, and resolving documentation deficienciesDevelop and execute continuous monitoring activities to maintain the cybersecurity posture and authorization status of assigned information systemsAssess proposed system modifications, software updates, and configuration changes to determine their impact on security controls, authorization boundaries, and existing ATO/IATT conditionsCollaborate directly with systems, software, and network engineers to ensure cybersecurity requirements are incorporated into system design, development, integration, and testing activitiesProvide technical guidance on secure configurations, operating system hardening, network security, virtualization, and vulnerability remediation to support compliance with DoD cybersecurity requirements Requirements 6-8 years of professional experience in DoD cybersecurity, information assurance, systems administration, network engineering, or related technical disciplinesDemonstrated experience supporting DoD RMF authorization activities, including development and maintenance of ATO and/or IATT packagesHands-on experience developing and maintaining RMF documentation, including SSPs, security control implementation statements, POA&Ms, and supporting assessment artifactsExperience utilizing eMASS to document security controls, manage authorization artifacts, track assessment findings, and maintain RMF packagesStrong working knowledge of NIST SP 800-53, DoD RMF requirements, and security control implementation and assessment methodologiesExperience interpreting DISA STIG requirements, vulnerability assessment results, and system security configurations to determine compliance and develop remediation recommendationsExperience reviewing technical system configurations, network architectures, and security control implementations to support accurate RMF documentationWorking knowledge of Linux and Windows operating systems, including system administration, security hardening, access controls, and configuration managementFamiliarity with virtualized environments such as VMware, KVM, or Hyper-V and their associated cybersecurity considerationsUnderstanding of networking fundamentals, including TCP/IP, VLANs, subnets, firewalls, routing, network segmentation, and secure communicationsAbility to analyze cybersecurity findings, document technical risks, and communicate remediation requirements to engineering teams and government stakeholdersStrong technical writing skills with demonstrated ability to produce clear, accurate, and technically defensible security documentationAbility to independently manage multiple RMF deliverables, coordinate across engineering disciplines, and meet program authorization milestonesAbility to meet applicable DoD 8140 cybersecurity workforce qualification requirements for the assigned work roleU.S. citizenshipActive Secret security clearance Preferred Qualifications Experience independently managing DoD RMF authorization packages from initial system categorization through authorization and continuous monitoringExperience supporting successful ATO/IATT submissions, security assessments, and authorization package reviewsFamiliarity with Navy, Marine Corps, or Air Force RMF authorization processes and service-specific requirementsExperience supporting cybersecurity accreditation of Research, Development, Test, and Evaluation (RDT&E) systems, developmental systems, or operational DoD capabilitiesExperience coordinating directly with SCAs, AOs, government ISSMs, and other authorization stakeholdersExperience performing security control inheritance analysis, developing system authorization boundaries, and identifying applicable overlays and control tailoring requirementsExperience using ACAS, Nessus, SCAP, STIG Viewer, and other vulnerability assessment or compliance toolsExperience with technical implementation of DISA STIGs and security hardening of Linux, Windows, networking equipment, and virtualized environmentsFamiliarity with DoDI 8510.01, NIST SP 800-37, CNSSI 1253, and applicable DoD continuous monitoring guidanceKnowledge of Navy Command, Control, Communications, Computers, Intelligence, Surveillance, and Reconnaissance (C4ISR) systems, military networks, or tactical data linksExperience supporting cybersecurity requirements within Agile software development or systems engineering environmentsExperience assessing cybersecurity risks associated with custom software, specialized hardware, or mission-specific system architectures Ideal Candidate The ideal candidate is a cybersecurity professional with substantial experience supporting DoD RMF authorization activities and a strong technical foundation in systems and network security. This individual understands how to develop and maintain technically accurate RMF packages, interpret security control requirements, and coordinate authorization activities with engineering teams and government stakeholders. Beyond documentation, the successful candidate will be able to examine system configurations, understand network architectures, interpret vulnerability assessment results, and determine whether security controls are appropriately implemented. We are seeking someone who can independently drive RMF activities, identify potential authorization challenges, and work proactively with engineering teams to resolve technical and compliance issues. Candidates should be comfortable operating in dynamic engineering environments where systems evolve throughout development, testing, and deployment. We recognize that qualified candidates bring diverse technical backgrounds and experiences. If you meet many, but not all, of the qualifications listed above, we encourage you to apply and explain how your experience aligns with the position. More about Fuse: Founded in 2010, Fuse is a veteran-owned, rapidly growing small business. Our San Diego-based company has earned recognition as an emerging leader in airborne, maritime, and ground networking. Placing the warfighter at the center of every design process, Fuse delivers intuitive, agile, and resilient products that go beyond national security requirements—providing lasting utility and game-changing results. We take pride in our brilliant and talented team as well as our dynamic environment and collaborative, creative, environment. We build cutting-edge hardware and software products that solve complex national security challenges for our warfighters at the tactical edge. Salary Range: $120,000 - $160,000 Benefits Medical, Dental, and VisionEmployee coverage is fully funded; a portion of dependents' coverage is funded as well11 paid Federal HolidaysPaid Time Off (PTO)Date of hire through second year: 10 days/year (accrued)After two years: unlimited40 hours of paid sick leave per year401k with employer matchingAnnual bonusesCell phone reimbursement: $100/month