Information System Security Engineer

This is a 6-month contract position for an Information System Security Engineer based in Salt Lake City, Utah.

Responsibilities

• Execute and support RMF (Risk Management Framework) lifecycle activities including categorization, control selection, implementation, assessment, authorization, and continuous monitoring
• Develop, maintain, and review RMF documentation such as System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and related security plans
• Interpret and apply security controls from NIST SP 800-53, CNSSI 1253, and related guidance
• Support implementation and validation of Security Technical Implementation Guides (STIGs) and other configuration baselines
• Collaborate with cross-functional engineering teams (systems, software, hardware) to ensure security requirements are properly implemented
• Interface with internal stakeholders, Authorizing Officials (AOs), and external assessors to support authorization efforts
• Track and report compliance status, risks, and remediation activities to program leadership
• Contribute to continuous monitoring strategies and ongoing system compliance
• Travel up to 10% as needed

Qualifications

• Required

• One of the following educational and experience combinations:

• Bachelor's degree in cybersecurity, computer science, information systems, or related field with minimum 4 years of prior relevant experience

• Graduate degree with minimum 2 years of prior related experience

• Minimum 8 years of prior related experience in lieu of a degree

• DoD Secret Clearance