Information Systems Security Engineer (ISSE)

About the role

Job Type: Full-Time. Security Clearance: Active Secret. Location: Virginia Beach- Onsite. AERMOR is seeking an experienced Information Systems Security Engineer (ISSE) to support the Navy Expeditionary Combat Command (NECC). The ISSE will provide cybersecurity and technical support focused on Risk Management Framework (RMF), Assessment & Authorization (A&A), security authorization packages, vulnerability management, and cybersecurity compliance for Navy information systems and networks. The ideal candidate will have hands-on experience supporting DoD or Navy RMF processes, developing and maintaining cybersecurity authorization artifacts, assessing security controls, identifying and mitigating vulnerabilities, and maintaining systems in accordance with Department of Defense (DoD) and Department of the Navy (DoN) cybersecurity requirements.

Responsibilities

• Support Risk Management Framework (RMF) and Assessment & Authorization (A&A) activities for Navy information systems.
• Develop, maintain, and update Navy Security Authorization Packages and associated cybersecurity documentation.
• Develop and maintain RMF artifacts, including Plans of Action & Milestones (POA&Ms), risk assessments, Security Assessment Plans, security plans, and supporting authorization documentation.
• Assess and validate the implementation of applicable security controls and support continuous monitoring activities.
• Maintain RMF and authorization documentation within eMASS, ensuring packages remain current as systems, software, hardware, infrastructure, and operating environments change.
• Conduct system and network vulnerability analysis and evaluate cybersecurity risks associated with system changes and integrations.
• Analyze vulnerability and compliance findings using ACAS/Tenable and support remediation and risk-mitigation activities.
• Support system hardening and cybersecurity compliance in accordance with applicable DISA Security Technical Implementation Guides (STIGs) and DoD/DoN cybersecurity requirements.
• Evaluate system and network configurations for compliance with cybersecurity policies and security requirements.
• Provide cybersecurity analysis related to ports and protocols, firewall policies, system/network configurations, contingency planning, and risk mitigation.
• Work with system administrators, government personnel, and cybersecurity stakeholders to resolve security findings and maintain system authorization and cybersecurity posture.
• Develop technical documentation, SOPs, checklists, workflow processes, briefings, and other documentation supporting RMF and cybersecurity activities.

Qualifications

• Bachelor’s degree in a technical or managerial-related discipline. Additional qualifying experience may be accepted in lieu of the degree.
• DoD 8570 IAT Level II certification - Security+ or greater.
• 5+ years of practical experience in cybersecurity, engineering, A&A, RMF,