Software Gigs

Lyntris seeks a Cyber Security Engineer II to provide Risk Management Framework (RMF) Assessment and Authorization (A&A) support for Navy software solutions. The role involves designing, implementing, and monitoring cybersecurity and information assurance policies for mission-critical systems; developing system IA documentation (categorization forms, security plans, assessment plans, continuous monitoring plans, risk assessments); and guiding the software development team through security scan review, evaluation, and remediation. The engineer will work with system owners and stakeholders to manage cybersecurity requirements and continuously improve cyber posture. Requires 2–3 years of Department of Navy accreditation experience and working knowledge of NIST standards, RMF, and eMASS.

The RMF Engineer will support DoD Assessment & Authorization activities by developing, maintaining, and managing Risk Management Framework documentation and artifacts throughout the system lifecycle. Key responsibilities include system categorization, creating and updating security plans and control evidence, managing RMF packages in eMASS, assessing security controls, and coordinating with engineering and cybersecurity teams on remediation. The role requires 3+ years of hands-on DoD RMF experience, deep knowledge of NIST SP 800-53 and RMF processes, and proficiency with authorization management tools. This hybrid position is mostly remote and demands strong technical documentation and stakeholder communication skills.

This role performs system hardening, vulnerability management, and STIG implementation across Windows and Linux systems in compliance with DoD cybersecurity standards. The Cybersecurity Engineer II will conduct vulnerability assessments using ACAS, analyze and remediate security findings, apply patches and updates, and support compliance and continuous monitoring activities. The position requires a Bachelor's degree in Cybersecurity or related field, one or more IAT Level II certifications (CCNA, CySA+, GICSP, GSEC, Security+, or SSCP), and 5 years of demonstrated hands-on experience in system hardening and vulnerability remediation in DoD environments.