> Markdown version of [/jobs/ext/1472353-information-systems-security-engineer](https://www.wearedevelopers.com/jobs/ext/1472353-information-systems-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Engineer - **Company:** Akima - **Location:** Newport, RI, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Comptia Cloud+, Xacta, Cloud Computing Security, Cyber Security, Information Systems, Computer Networks, Software Engineering, Software Vulnerability Management, Malware, Information Technology, Plan of Action and Milestones, Vulnerability Analysis - **Published:** July 28, 2026 - **Apply:** https://www.dice.com/job-detail/4b31e875-5564-44ea-a8b1-5770b7775490 ## About the Role * Active DoD Secret clearance. * Minimum 3 years of hands-on cybersecurity experience implementing, upgrading and monitoring security measures for the protection of computer networks and information. * Demonstrated experience performing vulnerability scanning and compliance assessments using tools such as ACAS and/or Evaluate-STIG. * Experience supporting RMF / A&A processes, including development, maintenance, or review of cybersecurity documentation and artifacts. * Experience identifying, assessing, and documenting cybersecurity risks and mitigation strategies. * Ability to work independently as the sole on-site cybersecurity resource, managing workload, priorities, and task execution with minimal supervision. * Strong attention to detail and ability to produce accurate, first-pass cybersecurity deliverables. * One or more of the following DoD 8140 qualifications: + Certified Cloud Security Professional (CCSP) + CompTIA Cloud+ + CompTIA SecurityX (Formerly CASP+) + BS degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Data Science, or Software Engineering. Desired Qualifications: * Experience supporting NAVAIR, Navy, or DoD RDT&E environments. * Hands-on experience with ACAS scan configuration, execution, validation, and reporting. * Hands-on experience using Evaluate-STIG for STIG assessments, compliance tracking, and remediation support. * Experience working with eMASSTER, Xacta, or similar RMF tools. * Experience supporting systems across classified and unclassified networks. * Familiarity with STIG implementation, POA&M development, and vulnerability remediation tracking. * Experience supporting cybersecurity efforts during system acquisition, testing, and A&A phases. * Demonstrated ability to operate autonomously while maintaining effective communication with remote teams and government stakeholders. ## Description AMO is looking for a Information Systems Security Engineer - Journeyman (ISSE) to work in support of Naval Air Warfare Center Training Systems Division (NAWCTSD) in Newport, Rhode Island., * Plan, implement, monitor, and maintain cybersecurity controls to protect computer networks, systems, and information across classified and unclassified environments. * Perform vulnerability scanning and assessment activities using tools such as ACAS and Evaluate-STIG, ensuring accurate configuration, execution, validation, and reporting of results. * May support systems undergoing the acquisition lifecycle by assessing cybersecurity risks, identifying vulnerabilities, and recommending mitigation strategies in accordance with RMF and NAVAIR guidance. * May execute cybersecurity testing and validation activities for systems undergoing Assess and Authorize (A&A). * Develop, review, and maintain RMF artifacts and supporting documentation to ensure compliance with DoD and NAVAIR cybersecurity requirements. * Assess risks to IT assets using available threat and vulnerability intelligence and provide clear, actionable risk recommendations. * Provide technical expertise to identify security-related issues affecting current and planned systems, networks, and architectures within the NAVAIR enterprise and RDT&E environments. * Respond to and assist with the investigation of cybersecurity incidents, vulnerabilities, and malware events as required. * Serve as the primary and sole on-site cybersecurity resource, independently managing assigned tasks, priorities, and deliverables while coordinating with off-site team members and government stakeholders. * Ensure cybersecurity deliverables are accurate, current, and usable on first submission, requiring minimal rework. * Maintain awareness of emerging cybersecurity threats, tools, and best practices, and provide documented recommendations when appropriate. * Maintain required training, certifications, and technical proficiency to adapt to evolving cyber threat landscapes and mission needs. ## Related Videos - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Get security done: streamlining application security with Aikido](https://www.wearedevelopers.com/videos/1638-get-security-done-streamlining-application-security-with-aikido) - [Full Spectrum File Uploads](https://www.wearedevelopers.com/videos/870-full-spectrum-file-uploads) - [WeAreDevelopers LIVE - Yes, CSS Can Do That!](https://www.wearedevelopers.com/videos/1819-wearedevelopers-live-yes-css-can-do-that) - [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)