STIG / COMPLIANCE ENGINEER

Overview

Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower AI Platform® provides a practical, sustainable path for clients to achieve transformation that is true to who they are, what they do, how they work, with the resources they have. The result is a government workforce that is exponentially more creative and productive. For more information, visit www.Empower.ai . Empower AI is proud to be recognized as a 2024 Military Friendly Employer by Viqtory, the publisher of G.I. Jobs. This designation reflects the company’s commitment to hiring and supporting active-duty and veteran employees.

Position Details

This is a salaried, FLSA‑exempt position. The role is an onsite position in Quantico, VA (RKB) with up to 10% travel involved.

Responsibilities

• Analyze new and updated DISA STIG/SRG releases for applicability and operational impact, and engineer the corresponding Group Policy Objects, MECM compliance baselines, and image configurations for Windows endpoints, browsers, Office, and third‑party applications.
• Run and analyze SCAP Compliance Checker and STIG Viewer assessments across the endpoint environment, determine root cause of deviations, decide remediation or documented mitigation, and drive changes through pre‑production/Digital Twin validation and Change Management.
• Produce endpoint inputs to the monthly STIG Compliance Report, maintain control implementation statements and evidence in eMASS, and coordinate POA&M entries and risk acceptance requests with the ISSO and Risk Management Support Lead.
• Maintain the endpoint security baseline documentation and evaluate the security impact (CM‑4) of proposed endpoint configuration changes.
• Analyze weekly ACAS/Nessus vulnerability scan results for all in‑scope systems, identify and prioritize critical and high (CAT I/II/III) vulnerabilities, assign remediation to resolver groups, validate fixes, and produce the weekly Vulnerability Scan Analysis Report.
• Assess STIG compliance for endpoints, servers, printers, communications equipment, and platforms using STIG Viewer, SCAP, and endpoint management compliance data; track deviations and remediation; and produce the monthly STIG Compliance Report.
• Maintain and update POA&M items in eMASS for assigned systems, including milestones, mitigations, risk statements, and evidence of closure, in coordination with ISSOs and system administrators.
• Monitor the endpoint environment's security compliance status (patch compliance, baseline compliance, time‑to‑remediate) and ensure accurate cybersecurity metrics are fed to the Customer Support Metrics Dashboard.

Qualifications

Requirements:

• Bachelor's degree and a minimum of 3 years of related experience (an additional 4 years of related experience may be substituted for the degree).
• Must be a U.S. Citizen.
• Must have an Active Top Secret Clearance (favorably adjudicated T5/T5R) to start; this is a Privileged User position.
• Must be willing and able to obtain TS/SCI eligibility after start, if required by mission needs.
• Must be within investigation scope and