Job DescriptionCOLSA is seeking a Cybersecurity Software Engineer with strong software development experience to design, develop, and integrate tools that enhance and automate Risk Management Framework (RMF) processes and procedures. The ideal candidate will have hands-on software development expertise combined with an understanding of cybersecurity compliance workflows within a DoW environment.
Principal Duties and Responsibilities (*Essential functions)
- Develop, enhance, and maintain tools and scripts that automate RMF processes and support system accreditation activities.
- Integrate RMF-related data sources, reports, and workflows into custom-built applications or automation scripts.
- Support cybersecurity teams by creating capabilities that improve efficiency, reduce manual workload, and standardize compliance activities.
- Create clear and comprehensive documentation for all tools, scripts, workflows, and processes, ensuring ease of use and long-term maintainability.
- Assist with improving RMF documentation, templates, and technical artifacts including security plans, control evidence, and compliance reports.
- Troubleshoot and maintain existing toolsets, ensuring they remain functional, secure, and aligned with current RMF requirements.
- Communicate technical concepts and tool capabilities to non-technical stakeholders in a clear and concise manner.
Required Experience- Bachelors' degree (or higher) in computer science, information systems, engineering, business or other related field or equivalent
- Minimum of 2-5 years related experience
- Software development experience with languages such as Python and C#, with a focus on building automation, data processing, and compliance support tools
- Ability to collaborate with cybersecurity teams, system owners, and developers to ensure tools align with compliance needs
- Familiarity with APIs, database integration, or UI/UX development for internal tools
- Strong documentation and technical writing skills, including the ability to prepare system documentation, SOPs, scripts/tool user guides, and process workflows
- U.S. Citizenship required; ability to obtain a Secret security clearance prior to start date
Preferred Qualifications- Current Secret security clearance
- Experience developing or integrating tools that support RMF activities such as control validation, documentation generation, workflow automation, reporting, and continuous monitoring
- Familiarity with industry tools and capabilities used in cybersecurity compliance (e.g., eMASS, ACAS, Nessus, HBSS, or similar systems)
- Ability to translate RMF requirements into technical solutions that improve efficiency, accuracy, and consistency
- Relevant certifications such as Security+, CySA+, or developer-focused credentials
Applicant selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information.
