Cybersecurity Engineer-Mid

About Imagineeer

Imagineeer is a fast-growing SBA 8(a) Small Disadvantaged Business headquartered in Arlington, VA, delivering federal AI modernization across health, defense, homeland security, and transportation. We design, test, and deploy secure, AI-ready systems that move agencies from pilots to production without breaking governance, compliance, or mission continuity. Our Mission Studio model creates shared environments where policy, data, security, and operations come together. We are capability-driven and competitive by design, not program-dependent. Our leadership has operated inside the federal systems we now transform, bringing institutional knowledge that accelerates delivery and reduces risk. If real delivery motivates you more than slides, and you want your work to compound across programs and agencies, Imagineeer is growing and we are building the team to match.

About this Role:

We are seeking a motivated Mid-Level Assessment & Authorization (A&A) Cybersecurity Engineer to support the security compliance and authorization processes for our federal government clients. This role offers an excellent opportunity for a cybersecurity professional with a solid foundation in NIST Risk Management Framework (RMF) and FISMA to grow into a senior-level role.

The ideal candidate will have hands-on experience in supporting cybersecurity compliance activities and a strong desire to advance their career in federal cybersecurity.

Key Responsibilities:

• Assist in the development and maintenance of security authorization packages
• Support the execution of security control assessments (SCA) and prepare associated documentation
• Help develop and maintain System Security Plans (SSPs)
• Track and manage Plans of Action and Milestones (POA&M) to ensure timely remediation of findings
• Participate in security impact analyses for system changes and updates
• Support the implementation of security controls and assist with technical remediation efforts
• Assist in conducting vulnerability assessments and documenting results
• Maintain and update authorization documentation to support ATO (Authorization to Operate) and reauthorization efforts
• Support continuous monitoring (ConMon) activities to ensure ongoing compliance
• Collaborate closely with system owners, security teams, and stakeholders to support cybersecurity requirements
• Assist in the development of security policies, procedures, and standard operating procedures (SOPs)
• Contribute to the preparation of Security Assessment Reports (SARs) and other compliance artifacts
• Participate in security working groups, meetings, and briefings as needed

Qualifications and Skills:

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field
• 4+ years of cybersecurity experience, with a focus on Assessment & Authorization (A&A) processes
• 2+ years of direct experience working with NIST RMF and FISMA compliance requirements
• Active Security+ certification (or equivalent such as SSCP, GSEC)
• Ability to obtain and maintain a Public Trust clearance
• Strong knowledge of the NIST Risk Management Framework (RMF) and FISMA requirements
• Familiarity with NIST 800-53 and related security control catalogs
• Understanding of security control assessments and the A&A process lifecycle
• Ability to develop, maintain, and review security documentation including SSPs, POA&Ms, and SARs
• Familiarity with security assessment and compliance tools (e.g., eMASS, Xacta, Archer)
• Knowledge of common security tools and technologies (e.g., vulnerability scanners like Nessus, Qualys)
• Basic skills in risk assessment and security analysis
• Strong technical writing and documentation skills
• Excellent attention to detail and commitment to producing high-quality work
• Good communication skills, both verbal and written
• Ability to work both independently and as part of a team in a collaborative environment

Desired Skills and Competencies:

• Additional certifications such as CASP+, CISSP (Associate), CAP, CEH
• Experience supporting classified systems or sensitive federal systems
• Knowledge of Cloud Security principles and familiarity with FedRAMP compliance
• Exposure to DevSecOps concepts, automated compliance, and security pipelines
• Familiarity with the Cybersecurity Maturity Model Certification (CMMC) framework
• Experience with continuous monitoring tools and techniques
• Basic understanding of security architecture principles
• Awareness of privacy requirements and associated controls
• Experience with documentation management systems (e.g., SharePoint, Confluence)
• Familiarity with agile development methodologies
• Prior experience working in or supporting federal government contracts
• Understanding of security testing methodologies, vulnerability scanning, and mitigation processes

Additional Information:

Employment for this position is contingent upon the candidate being a United States citizen and having the ability to successfully obtain and maintain a Public Trust clearance, in accordance with applicable federal regulations. We use AI to review Resumes. All hiring decisions will be made in compliance with applicable federal, state, and local laws and regulations

Equal Opportunity Employer:

We are an Equal Opportunity Employer and do not discriminate in employment decisions on the basis of race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other status protected by applicable federal, state, or local laws. All employment decisions are based on business needs, job requirements, and individual qualifications.