Cyber Security Engineer

SMX

. Provide cybersecurity engineering and compliance support for FedRAMP and DoD-authorized cloud environments, including IL4–6 .

Posted 10/30/2026full-timeRemote • Virginia • United StatesMid-LevelSenior💰 $103,100 - $171,820 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity engineering and compliance for federal cloud environments, with a strong focus on FedRAMP and DoD security requirements. Proficient in developing authorization documentation and implementing security controls across AWS and Azure environments.

Highest-signal resume keywords

Cybersecurity EngineeringFedRAMP ComplianceNIST SP 800-53 Rev. 5AWS/Azure Security ControlsGRC Platforms

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Authorization DocumentationControl ImplementationGap AssessmentsVulnerability ManagementSecurity MonitoringScriptingAutomationIAMEncryptionConfiguration Management

Soft Skills

Analytical SkillsDocumentation SkillsProblem-Solving SkillsCommunication SkillsStakeholder Management

Tools & Technologies

EMASSParamifyNessus/TenableSplunkPrisma Cloud

Certifications & Qualifications

CISSPCGRC/CAPCISMSecurity+

Industry Keywords

Federal Compliance FrameworksDoD IL4–6RMFSSPsPOA&Ms

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecuritySplunk

About the role

Key responsibilities & impact

Provide cybersecurity engineering and compliance support for FedRAMP and DoD-authorized cloud environments, including IL4–6
Advise partners and customers on federal and DoD security requirements, authorization strategies, control implementation, and audit readiness
Develop, review, and maintain authorization documentation, including SSPs, SAPs, SARs, POA&Ms, FedRAMP appendices, policies, and supporting evidence
Support system authorization and reauthorization activities across FedRAMP/RMF, including gap assessments, control validation, evidence development, and remediation planning
Leverage GRC platforms, APIs, scripts, and automation to streamline compliance workflows, evidence collection, documentation updates, control testing, and reporting
Develop repeatable and auditable processes that reduce manual compliance effort and improve authorization artifact accuracy and consistency
Collaborate with cloud engineering and DevOps teams to design, implement, and validate security controls across AWS, Azure, and hybrid environments
Review system changes and significant change requests to assess security impact, identify documentation updates, and maintain authorization boundaries
Coordinate with system owners, engineers, 3PAOs, Authorizing Officials, and government stakeholders to address findings and support authorization outcomes
Support continuous monitoring, vulnerability management, POA&M updates, remediation tracking, and recurring compliance deliverables
Evaluate security tooling and data sources for automated control validation and compliance reporting
Track evolving federal cybersecurity requirements and translate them into practical technical and operational actions

Requirements

What you’ll need

U.S. citizenship
Ability to obtain and maintain a Secret or higher security clearance
Bachelor’s degree in Information Security, Cybersecurity, Computer Science, or a related field, or equivalent practical experience
Five or more years of cybersecurity experience, including at least three years supporting federal cloud security engineering, information assurance, RMF, or ISSO functions
Knowledge of NIST SP 800-53 Rev. 5, FedRAMP Moderate and High, DoD IL4–6 overlays, RMF, and related federal compliance frameworks
Experience developing and maintaining SSPs, POA&Ms, SARs, policies, control evidence, and other authorization artifacts
Experience supporting authorization planning, gap assessments, audit readiness, control implementation, and remediation activities
Hands-on experience with AWS, Azure, or hybrid cloud environments, including IAM, encryption, logging, configuration management, and security monitoring
Experience using GRC platforms, APIs, scripting, or automation to improve compliance and security workflows
Familiarity with eMASS, Paramify, Nessus/Tenable, Splunk, Prisma Cloud, or comparable solutions
CISSP, CGRC/CAP, CISM, Security+, or similar cybersecurity certificate
Strong analytical, documentation, problem-solving, communication, and stakeholder-management skills
Ability to translate federal security requirements into practical technical controls and operational processes
Selected applicant may be subject to a background investigation and/or education verification
No employer-sponsored immigration or work-authorization support

Benefits

Comp & perks

Health insurance
Paid leave
Retirement
Learning and development opportunities
Competitive compensation