Information Systems Security Engineer

Redhorse transforms the way government uses data and technology. To support this mission, we are seeking a Information Systems Security Engineer to guide the implementation of the Risk Management Framework (RMF) for critical FBI IT systems. In this role, you will be a cornerstone of the Bureau’s security posture, leading a talented team of professionals to ensure that mission-essential technology is designed, tested, and maintained to the highest standards of national security. You will have a direct impact on the safety and integrity of data that supports the FBI’s most vital operations., * Lead, mentor, and supervise a team of contractor security professionals responsible for the end-to-end implementation of the RMF lifecycle for FBI IT systems.

• Oversee and coordinate activities within the Prepare step, ensuring roles, responsibilities, and risk management strategies are clearly defined and maintained.
• Guide system categorization efforts to ensure all information systems are appropriately classified based on mission/business impact and regulatory requirements.
• Advise on the selection, tailoring, and documentation of security controls aligned with system categorizations, Bureau risk appetite, and compliance requirements.
• Oversee the implementation of technical, operational, and management controls throughout system and application lifecycles, with a focus on quality and completeness.
• Ensure comprehensive security control assessments are planned, executed, and documented to validate the effectiveness of implemented safeguards.
• Prepare risk management documentation for system authorization and executive decision-making.
• Direct ongoing monitoring and continuous assessment activities, collecting metrics to adjust security strategies and ensure sustained compliance.
• Serve as a principal technical advisor on cybersecurity, providing subject-matter expertise to risk analysis, incident response, and system remediation.
• Foster a culture of security awareness, providing technical guidance and training to both team members and stakeholders.
• Track, report, and communicate status, risks, and improvement opportunities related to security engineering activities to leadership.
• Maintain up-to-date knowledge of RMF, NIST guidance, and industry best practices in support of continuous process improvement.

• Active Top Secret (TS) security clearance.
• 8+ years of experience in secure design, analysis, and test of information security systems and products.
• 8+ years of experience applying methods, standards, and approaches for ensuring baseline security safeguards are appropriately implemented and documented.
• 8+ years of experience creating and updating security test plans for detecting and mitigating risk to information systems.

• Certified Information Systems Security Professional (CISSP) or Certified Ethical Hacker (CEH) certification.

• Active Cloud Certification (e.g., AWS, Azure, or Google Cloud).
• Familiarity with Redhorse standard tools such as GitLab, Jira, and DataBricks.
• Experience working with NIST SP 800-37 Revision 2 and other federal security guidelines.
• Previous experience supporting the Department of Justice (DOJ) or FBI.

Now is a great time to join Redhorse Corporation. We are a solution-driven company delivering data insights and technology solutions to customers with missions critical to U.S. national interests. We’re looking for thoughtful, skilled professionals who thrive as trusted partners building technology-agnostic solutions and want to apply their talents supporting customers with difficult and important mission sets.