> Markdown version of [/jobs/ext/2182117-lead-information-systems-security-engineer-isse-navy-yard-washington-dc](https://www.wearedevelopers.com/jobs/ext/2182117-lead-information-systems-security-engineer-isse-navy-yard-washington-dc). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Lead Information Systems Security Engineer (ISSE) - Navy Yard - Washington, DC - **Company:** Serco - **Location:** Springfield, VA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Cyber Security, Databases, Firmware, Identity and Access Management, Information Security Management, Microsoft Operating Systems, Microsoft SQL Server, Package Development Process, Red Hat Enterprise Linux, SAP (Applications), Security Content Automation Protocol, Data Streaming, Lenel, Information Technology, Cisco, Plan of Action and Milestones - **Published:** August 22, 2026 - **Apply:** https://dejobs.org/x/x/9DBFB44742FD43ACA658ED2699E6DC29/job/ ## About the Role * An active DoD Secret security clearance * U.S Citizenship required * 8570 IAT Level II compliant certification * A Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related discipline * Minimum 8 years of combined experience in the following; * Experience in an Information Technology or Cybersecurity environment supporting the Department of Defense * Experience with EMASS, RMF, ACAS, STIG's, & VRAM * Recent experience with the RMF and NIST SP 800-53 rev 4 as an ISSE * Recent experience with developing A&A documentation & obtaining ATO's * Knowledge of US naval communication suites in areas such as LAN, WAN, and RF paths * Familiarity with the DoD Information Technology Portfolio Repository-Navy (DITPR-DON)/DON Application and Database Management System (DADMS) and the requirements for their use * Proficiency in at least 2-3 of the following disciplines * Microsoft operating systems * Microsoft SQL * Red Hat Linux * Cisco * Aruba Wireless * Lenel (preferred) Additional desired experience and skills: * 8570 IAM Level III compliant certification ## Description This CNIC N6 Lead Information System Security Engineer (ISSE) for the Risk Management Framework (RMF) Assessment and Authorization (A&A) process, is tasked with developing RMF security authorization packages to obtain Authorizations to Operate (ATOs) for various isolated enclaves that support the NDW Region. These enclaves support many different missions, including, but not limited to, Anti-Terrorism/Force-Protection (AT/FP), access control, video monitoring, and mobile radio systems. This position is contingent upon your ability to transfer & maintain your DoD Secret security clearance. In this role, you will: * Support CNRNDW ISSM / CIO with RMF package development as the lead ISSE. * Assemble and review all required documentation as outlined by the ISSM and CNIC for the RMF packages. * Tailor security controls out of National Institute of Standards and Technology (NIST) SP 800-53 rev 4 for the systems. * Assist with updating policy and documentation along with maintaining compliance with NIST SP 800-53 rev 4 throughout the RMF lifecycle. * Develop a Security Assessment Plan (SAP) in accordance with the Navy RMF Process Guide ver. 3.1 and using the templates provided in the RMF Knowledge Service (KS). * Assess and implement security controls, Security Technical Implementation Guides (STIGs), and Assured Compliance Assessment Solution (ACAS) scans in accordance with the SAP. * Gather ACAS, STIG, Security Content Automation Protocol (SCAP) files, and other related package artifacts and report any discrepancies to the program. * Build risk assessment report (RAR) incorporating all findings discovered in testing and documenting an analysis of each finding. * Verify traceability between system authorization data flow, boundary diagrams, Hardware, Firmware, Software, Ports, Protocols and Services (PPS) lists, and ACAS scan. * Update and help implement the status of all security controls, enhancements, and control correlation identifiers (CCIs) in eMASS. * Make data entries into eMASS record for assigned systems and track RMF process timelines. * Prepare for and conduct RMF-related briefings at meetings with internal and external representatives. * Interact frequently with internal personnel and outside representatives at various levels. * Assist in developing schedules and plans of actions and milestones (POA&M) for producing deliverable products and reports within customer-directed timelines. * Coordinate with field activities, obtaining statuses and providing RMF guidance for all CNIC CNRNDW packages. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Playing Pong on a shoulder press machine](https://www.wearedevelopers.com/videos/100140-playing-pong-on-a-shoulder-press-machine) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) - [SRE Methods In an Agency Environment](https://www.wearedevelopers.com/videos/348-sre-methods-in-an-agency-environment) - [Agent Smith Gets Hardware: Autonomous IoT Hacking From Debug Port to Cloud API](https://www.wearedevelopers.com/videos/100258-agent-smith-gets-hardware-autonomous-iot-hacking-from-debug-port-to-cloud-api) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)