Info Security sys Engineering

Job Overview:

Pay Range: $60.00hr - $65.00hr

Requirement/Must Have:

• Bachelor's Degree in cybersecurity, computer science, information systems, or related field with and minimum 6+ years of prior relevant experience.
• Graduate Degree and a minimum of 4+ years of prior related experience.
• In lieu of a degree, minimum of 10+ years of prior related experience.
• Must have a DoD Secret Clearance.
• Understanding of networking concepts (TCP/IP, network architecture, boundary defense).
• Experience working with embedded systems or communications systems.
• Familiarity with Agile or DevSecOps environments.
• Experience working in cross-functional engineering teams.
• Ability to travel up to 10% as needed.

Responsibilities:

• Execute and support RMF lifecycle activities (categorization, control selection, implementation, assessment, authorization, and continuous monitoring).
• Develop, maintain, and review RMF documentation (e.g., SSPs, SARs, POA&Ms, Security Plans).
• Interpret and apply security controls from NIST SP 800-53, CNSSI 1253, and related guidance.
• Support implementation and validation of Security Technical Implementation Guides (STIGs) and other configuration baselines.
• Collaborate with cross-functional engineering teams (systems, software, hardware) to ensure security requirements are properly implemented.
• Interface with internal stakeholders, Authorizing Officials (AOs), and external assessors to support authorization efforts.
• Track and report compliance status, risks, and remediation activities to program leadership.
• Contribute to continuous monitoring strategies and ongoing system compliance.
• Perform documentation analysis creation and Lab work with IT systems and specialized embedded systems.

Nice to Have:

• Exposure to cryptographic systems, FIPS 140-3, or NSA certification processes.
• Experience with high-assurance or classified systems.
• Hands-on experience executing RMF within DoD environments.
• Familiarity with tools such as eMASS or XACTA.
• Experience applying NIST SP 800-53 security controls and STIGs.
• Experience supporting Authority to Operate (ATO) processes.
• Strong verbal and written communication skills.
• Familiarity with TEMPEST, Anti-Tamper, or related system security disciplines.
• Experience supporting government customers in a SETA/A&AS role.
• Additional certifications (CISM, CISA, CEH, GIAC, etc.).
• Active TS/SCI clearance or ability to obtain.

Skills:

• Risk Management Framework (RMF).
• NIST SP 800-53.
• CNSSI 1253.
• STIGs.
• Cybersecurity Governance, Risk, and Compliance (GRC).
• eMASS.
• XACTA.
• TCP/IP.
• Network Architecture.
• Embedded Systems.
• Agile.
• DevSecOps.

Qualification And Education:

• One DoD 8140 / 8570-compliant certification (e.g., Security+, CISSP, SSCP, GSEC), or ability to obtain within 6 months of hire.