DirectJobHub
Jobs · Information Technology · Virginia

Lead Information Systems Security Engineer (ISSE) - Navy Yard - Washington, DC

Serco · Crystal City, VA · 1 wk ago
Information TechnologyFull-time

Serco is seeking a Lead Information System Security Engineer (ISSE) to support the United States Navy and our CNIC N6 program at the Navy Yard in Washington, DC. This role is on-site 5 days a week, Monday through Friday.

About the role

As the CNIC N6 Lead ISSE for the Risk Management Framework (RMF) Assessment and Authorization (A&A) process, you will develop RMF security authorization packages to obtain Authorizations to Operate (ATOs) for various isolated enclaves supporting the NDW Region. These enclaves support missions including Anti-Terrorism/Force-Protection (AT/FP), access control, video monitoring, and mobile radio systems. This position requires an active and transferable DoD Secret security clearance.

Responsibilities

  • Support CNRNDW ISSM / CIO with RMF package development as the lead ISSE.
  • Assemble and review all required documentation as outlined by the ISSM and CNIC for the RMF packages.
  • Tailor security controls from National Institute of Standards and Technology (NIST) SP 800-53 rev 4 for the systems.
  • Assist with updating policy and documentation while maintaining compliance with NIST SP 800-53 rev 4 throughout the RMF lifecycle.
  • Develop a Security Assessment Plan (SAP) in accordance with the Navy RMF Process Guide ver. 3.1 using templates from the RMF Knowledge Service (KS).
  • Assess and implement security controls, Security Technical Implementation Guides (STIGs), and Assured Compliance Assessment Solution (ACAS) scans in accordance with the SAP.
  • Gather ACAS, STIG, Security Content Automation Protocol (SCAP) files, and other related package artifacts; report any discrepancies to the program.
  • Build a Risk Assessment Report (RAR) incorporating all findings from testing and documenting an analysis of each finding.
  • Verify traceability between system authorization data flow, boundary diagrams, Hardware, Firmware, Software, Ports, Protocols, and Services (PPS) lists, and ACAS scans.
  • Update and help implement the status of all security controls, enhancements, and control correlation identifiers (CCIs) in eMASS.
  • Make data entries into the eMASS record for assigned systems and track RMF process timelines.
  • Prepare for and conduct RMF-related briefings at meetings with internal and external representatives.
  • Interact frequently with internal personnel and outside representatives at various levels.
  • Assist in developing schedules and Plans of Actions and Milestones (POA&M) for producing deliverable products and reports within customer-directed timelines.
  • Coordinate with field activities, obtaining statuses and providing RMF guidance for all CNIC CNRNDW packages.

Requirements

  • Active DoD Secret security clearance.
  • U.S. Citizenship required.
  • 8570 IAT Level II compliant certification.
  • Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, or a related discipline.
  • Minimum 8 years of combined experience in the following:
    • Information Technology or Cybersecurity environment supporting the Department of Defense.
    • Experience with eMASS, RMF, ACAS, STIGs, and VRAM.
    • Recent experience with RMF and NIST SP 800-53 rev 4 as an ISSE.
    • Recent experience developing A&A documentation and obtaining ATOs.
  • Knowledge of US naval communication suites in areas such as LAN, WAN, and RF paths.
  • Familiarity with the DoD Information Technology Portfolio Repository-Navy (DITPR-DON)/DON Application and Database Management System (DADMS) and the requirements for their use.
  • Proficiency in at least 2-3 of the following disciplines:
    • Microsoft operating systems.
    • Microsoft SQL.
    • Red Hat Linux.
    • Cisco.
    • Aruba Wireless.
    • Lenel (preferred).

Preferred Qualifications

  • 8570 IAM Level III compliant certification.

Benefits

Serco offers a comprehensive benefits package for full-time employees, including:

  • Medical, dental, and vision insurance.
  • Robust vacation and sick leave benefits, and flexible work arrangements where permitted by role or contract.
  • 401(k) plan with employer matching funds.
  • Tuition reimbursement program.
  • Life insurance and disability coverage.
  • Optional coverages that can be purchased, including pet insurance, home and auto insurance, additional life and accident insurance, critical illness insurance, group legal, and ID theft protection.
  • Birth, adoption, and parental leave benefits.
  • Employee Assistance Plan.

Pay

The salary range for this position is provided at the top of the posting. Actual base salary will be determined by factors including scope of the role, relevant experience, job-related knowledge, education, training, key skills, and geographic market considerations. Eligible positions may also include annual bonuses or long-term incentive opportunities.

Similar jobs