Information System Security Engineer (ISSE)

Responsibilities

• to join a collaborative team to develop, manage, and maintain the security posture within a series of secure, air-gapped development enclaves with a focus on continuous exposure management, RMF lifecycle management, and Authorization to Operate (ATO) support.
• Leveraging AI-assisted RMF tools to ingest system documentation and post-deployment playbooks to rapidly identify compliance gaps, accelerating the ATO process.
• Supporting continuous exposure management and ATO workflows to maintain real-time system authorization.
• Coordinating proper security control implementation with system administrators and engineers.
• Developing and implementing security controls and formulating operational risk mitigations along with assisting in security awareness programs.
• Involved in a wide range of security issues including architectures, firewalls, electronic data traffic, and network access.
• Performing analyses to validate established security requirements and recommending additional security requirements and safeguards.
• Supporting the formal Security Test and Evaluation (ST&E) required by each government accrediting authority through pre-test preparations, participation in the tests, analysis of the results, and preparation of required reports.
• Periodically conducting a review of each system's audits and monitoring corrective actions until all actions are closed.
• Supporting cyber metrics development, maintenance and reporting.
• Providing briefings to senior staff.

Required Qualifications

7+ years of relevant experience in Cybersecurity

• 7+ years of experience validating security controls within systems by utilizing scanning tools, configuration reviews, and manual testing
• 7+ years of experience utilizing the Risk Management Framework in support of obtaining a Authority to Operate
• Proficiency in drafting and auditing System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms) that clearly explain risk to non-technical stakeholders
• Ability to "translate" between the developers (who have the data) and the formal cybersecurity leadership (who needs the data).
• Experience translating technical configurations into "audit-ready" evidence for Governance, Risk, and Compliance (GRC) tools like eMASS or ServiceNow.
• Hands-on with eGRC tools like: eMASS, XACTA, RSA Archer, etc.
• Ability to clearly articulate ideas for executive level consumption
• Ability to use prior experience and knowledge to address new situations; especially during interactions with clients
• Ability to use prior experience and knowledge to seamlessly incorporate new knowledge or information during client interactions

Must have IAT II Certification

• B.A. or B.S. Information Security, Computer Science or related discipline
• US Citizenship and Top Secret Security Clearance with SCI eligibility
• This position will be an on-site based out of Omaha. NE. The salary range for this position is estimated to be between 130,000.00 - $155,000.00, commensurate on experience and technical skillset.
• We are strictly looking for direct, full-time W2 employees. We do not engage with third-party staffing agencies, C2C, or 1099 independent contractors for this role.
• We are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories.
• In compliance with federal law, all persons hired will be required to verify identity, confirm US Citizenship, and complete the required employment eligibility verification upon hire.