Risk Management Framework (RMF) Security Engineer

Information Systems Solutions, Inc. (ISS) is looking for a Risk Management Framework (RMF) Security Engineer to provide services in support of the U.S. Army Network Enterprise Technology Command (NETCOM). The selected candidate will support the design, development, engineering, integration, and technical and operational support for the Department of Defense Information Network (DODIN).

This position is 100% onsite.

Specific duties include, but are not limited to the following:

• Providing technical, administrative, and operational management of assigned project or tasks, including contract and subcontractor management.
• Participating in the development of technical project plans, proposals, reports, and task order and administrative reporting.
• Planning DoD security hardening, collection and assessment tool usage (STIGs, ACAS SCAP, Nessus, etc.)
• Completing cybersecurity documentation and system authorization artifacts (System Security Plan, lifecycle documentation, continuous monitoring plan, Security Assessment Plan, Security Assessment Report, Risk Assessment, etc.).

At Information Systems Solutions (ISS), we pride ourselves on providing an employee-focused and family first environment. Being a small business, we take the time to get to know our employees and have a vested interest in helping them achieve their career goals. We work to schedule regular social gathering to foster camaraderie within the company. ISS values their employees by providing a comprehensive benefits package that includes a fully vested 401(k) matching program, coverage of family medical deductibles, spot bonuses, and educational assistance to further your career.

Requirements

Clearance

Secret

Certifications (IAT Level III)

One Of The Following

• CASP
• CCNP Security
• CISA
• CISSP
• GCED
• GCIH
• CCSP

• BA/BS or equivalent experience
• Experience managing technical projects and supporting DoD contracts.
• Knowledge of DoD cybersecurity, RMF, and security hardening practices.
• Hands-on experience with STIGs, ACAS, SCAP, Nessus, and vulnerability assessments.
• Experience developing and maintaining cybersecurity documentation, including SSPs, SAPs, SARs, Risk Assessments, and Continuous Monitoring Plans.

• ITIL4 Foundation Certification
• 10 – 15 years of experience in information technology field