> Markdown version of [/jobs/ext/2254062-information-systems-security-engineer-rmf](https://www.wearedevelopers.com/jobs/ext/2254062-information-systems-security-engineer-rmf). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Systems Security Engineer (RMF) - **Company:** SAALEX Corp. - **Location:** Newport, RI, United States - **Experience:** Experienced - **Salary:** $60,000.0 - $70,000.0 - **Contract:** Permanent contract - **Skills:** CompTIA Security+, Cyber Security, Information Systems, Identity and Access Management, Security Software, Navsea, Information Technology - **Published:** August 26, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9117324/information-systems-security-engineer-rmf ## About the Role * Minimum of two (2) years of cybersecurity experience supporting RMF and Assessment & Authorization (A&A) activities. * Experience developing and maintaining RMF packages, including Security Plans, Risk Assessments, POA&Ms, and supporting documentation. * Experience with eMASS, ACAS, STIG Viewer, and cybersecurity compliance activities. * Working knowledge of NIST standards, RMF, DISA STIGs, and continuous monitoring requirements. * Ability to manage multiple priorities and communicate effectively with technical and non-technical stakeholders. * CompTIA Security+ or other DoD 8570/8140 IAM or IAT Level II certification required. Desired: * Experience supporting Navy, NAVSEA, or other DoD cybersecurity programs. * Experience conducting security control assessments and supporting ATO efforts. * Familiarity with cybersecurity process improvement initiatives and RMF policy development. * Experience providing cybersecurity training, mentoring, or technical guidance. * CAP, CASP+, CISSP, or other advanced cybersecurity certification. Education: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Engineering, or a related field preferred. Equivalent combination of education, certifications, military experience, and professional cybersecurity experience may be considered. ## Description Saalex is seeking a Information Systems Security Engineer (RMF) in Newport, RI to support the Naval Undersea Warfare Center Division Newport (NUWCDIVNPT). The selected candidate will support Assessment and Authorization (A&A) activities and assist in maintaining Authorizations to Operate (ATOs) for enterprise and Research, Development, Test & Evaluation (RDT&E) systems and networks., * Support Assessment and Authorization (A&A) activities to maintain Authorizations to Operate (ATOs) in accordance with DoD and Department of the Navy RMF requirements. * Support cybersecurity compliance, security assessments, continuous monitoring activities, and information assurance efforts across Navy enterprise and RDT&E systems and networks. * Develop, review, and maintain RMF package documentation, including Security Plans, Risk Assessments, POA&Ms, architecture diagrams, asset inventories, and system/site policies and procedures. * Perform security control assessments in accordance with NIST SP 800-37, NIST SP 800-53, NIST SP 800-53A, CNSSI 1253, and applicable Navy cybersecurity guidance. * Execute Security Assessment Plans, review Security Test Reports, identify security deficiencies, and support risk mitigation activities. * Utilize cybersecurity tools including eMASS, ACAS, STIG Viewer, and STIG OSS Manager to assess, document, and monitor compliance. * Develop and maintain cybersecurity documentation including Contingency Plans, Contingency Plan Tests, Business Impact Analyses, and other required security artifacts. * Provide guidance on Navy RMF policies, DoD cybersecurity directives, NAVSEA business rules, and cybersecurity compliance requirements while supporting process improvement initiatives. * Provide RMF and eMASS guidance to team members and stakeholders and support cybersecurity training efforts as needed. * Attend stakeholder meetings, track action items, coordinate follow-up activities, and collaborate with government and contractor personnel to support successful A&A outcomes. * Other duties as assigned or required. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) - [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm) - [Less Is More: How Lagom and Agile Can Create Harmonious Workflows](https://www.wearedevelopers.com/videos/1993-less-is-more-how-lagom-and-agile-can-create-harmonious-workflows) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)