ISSO Cybersecurity Engineer, Senior

What you'll do

• Manage RMF lifecycle activities and maintain authorization packages for DoD information systems.
• Maintain system security plans, continuous monitoring plans, and supporting evidence artifacts.
• Perform eMASS package administration and conduct quality assurance on security records.
• Coordinate monthly POA&M updates, evidence validation, and milestone tracking for closure.
• Translate NIST SP 800-53 controls into system-specific implementation statements and narratives.
• Develop Security Impact Assessments for proposed system changes and configuration modifications.
• Analyze STIG, SCAP, and ACAS findings to validate vulnerability results and remediation evidence.
• Review data connection tickets to identify required security artifacts and firewall actions.

What we're looking for

• 5+ years of experience with DoD RMF or cybersecurity.
• Experience using eMASS to address security controls, create POA&Ms, and upload artifacts like STIG checklists or ACAS scans.
• Experience with administration of Windows, Linux, AWS Cloud, containerization systems, and software configuration.
• Knowledge of NIST SP 800-37, NIST SP 800-53 Rev. 5, DoDI 8510.01, POA&M management, and DoD authorization practices.
• Ability to validate STIG and vulnerability findings using ACAS, Nessus, SCAP, SCC, and other manual procedures.
• Ability to analyze system boundaries, data flows, external interfaces, interconnections, and inherited controls.
• Bachelor's degree in a technical field such as Engineering or Cyber.
• TS/SCI clearance.