Cybersecurity Engineer - DoD RMF & Authorization

Who we are:

Fuse builds innovative communications, networking, and computing solutions that improve the sharing of information, video, text, and voice among operators distributed throughout the airborne, maritime, and ground environments. We are a Technology firm creating in-house software, network and hardware solutions that support our noble cause of advancing warfighter capabilities with elegant, user-focused communications, networks, and software systems.

About this role:

Do you thrive in innovative, design-driven environments with a high level of both accountability and trust? Are you passionate about protecting computer and network systems from cyber attacks and vigilant about resolving vulnerabilities? If so - we want to hear from you! Fuse is currently developing, integrating, and testing secure communications networks for U.S. defense agencies that improve the sharing of information among warfighters distributed throughout airborne, maritime, and ground environments. Must have in-depth experience with Linux and virtualized systems.

Duties and Responsibilities

• Lead and support the execution of the Department of Defense (DoD) Risk Management Framework (RMF) process for information systems throughout development, testing, authorization, and operational lifecycles.
• Develop, maintain, and manage complete RMF authorization packages supporting Authorizations to Operate (ATOs), Interim Authorizations to Test (IATTs), and ongoing system authorization activities.
• Prepare and maintain System Security Plans (SSPs), security control implementation statements, Plans of Action and Milestones (POA&Ms), hardware and software inventories, system architecture documentation, and other required RMF artifacts.
• Manage RMF authorization packages within Enterprise Mission Assurance Support Service (eMASS), ensuring security control documentation, assessment evidence, and supporting artifacts are accurate, complete, and maintained throughout the authorization lifecycle.
• Analyze and document security control implementations in accordance with NIST SP 800-53, DoDI 8510.01, CNSSI 1253, applicable DISA Security Technical Implementation Guides (STIGs), and DoD cybersecurity policies.
• Coordinate with Information System Security Managers (ISSMs), Information System Security Officers (ISSOs), Security Control Assessors (SCAs), Authorizing Officials (AOs), and government representatives to support security assessments and authorization decisions.
• Evaluate system architectures, configurations, and operational environments to determine security control applicability, implementation approaches, and compliance requirements.
• Review and interpret vulnerability assessment results from ACAS, Nessus, SCAP, and STIG compliance assessments to identify security deficiencies, document associated risks, and develop remediation recommendations.
• Develop, maintain, and track POA&Ms, coordinating with engineering teams to resolve identified vulnerabilities, document mitigating factors, and support risk acceptance decisions.
• Support Security Control Assessment (SCA) activities by preparing assessment evidence, responding to findings, coordinating technical demonstrations, and resolving documentation deficiencies.
• Develop and execute continuous monitoring activities to maintain the cybersecurity posture and authorization status of assigned information systems.
• Assess proposed system modifications, software updates, and configuration changes to determine their impact on security controls, authorization boundaries, and existing ATO/IATT conditions.
• Collaborate directly with systems, software, and network engineers to ensure cybersecurity requirements are incorporated into system design, development, integration, and testing activities.
• Provide technical guidance on secure configurations, operating system hardening, network security, virtualization, and vulnerability remediation to support compliance with DoD cybersecurity requirements.