Cybersecurity Engineer

About Agile Defense   At Agile Defense we know that action defines the outcome and new challenges require new solutions. That’s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next.   Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility—leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation’s vital interests.
Job Title: Cybersecurity Engineer / RMF Specialist Location: Columbus, OH | Onsite Clearance Level: Must be a US Citizen with the ability to obtain & maintain a Secret security clearance Certifications: Must meet DoD 8140.03 certification requirements for this role (IAM Level I), such as Security+ CE.

Job Description

We're looking for a Cybersecurity Risk Management Framework (RMF) Specialist to help a federal customer document, assess, and strengthen the security posture of their building and facility control systems. These systems keep the installation running — building automation, utilities, metering, and more — and your work directly supports the customer's path to achieving and maintaining their Authority to Operate (ATO).

This is a documentation and assessment focused role working as part of a small on site cyber team. You'll partner closely with the Cyber Systems Administrator who leads the team, as well as with the government's remote cybersecurity organization, system owners, and engineering staff. Your job is to gather the right information from the right people, turn it into clear and defensible RMF artifacts, and keep the paperwork accurate as the environment evolves. If you enjoy connecting the dots between what's running in the field and what the compliance framework requires, this role is for you.

JOB DUTIES AND RESPONSIBILITIES

• Develop and maintain RMF documentation and security artifacts, including system diagrams, categorization documents, control implementation write-ups, and plans of action.
• Collect, consolidate, and organize technical information from system owners, engineers, and operations staff into audit-ready deliverables.
• Support system categorization and risk assessment activities by preparing the supporting documentation and tracking input from stakeholders.
• Review vulnerability scan results and build out remediation plans (POA&Ms), tracking progress through to closure.
• Assist with STIG and security control checklists, documenting compliance status and exceptions.
• Maintain accurate inventories of hardware, software, and documentation in scope.
• Coordinate with the government's remote cybersecurity team, program managers, and security officers to ensure artifacts meet enterprise expectations.