Information System Security Engineer

• RMF Re-Authorization Leadership: Lead the development, analysis, and submission of the Authority to Operate (ATO) package via Navy eMASS in accordance with the Risk Management Framework (RMF).
• NIST SP 800-53 Rev 5 Alignment: Select, tailor, and validate system security controls specifically mapping to the updated NIST SP 800-53 Rev 5 framework.
• Vulnerability & EOL Assessment: Utilize Assured Compliance Assessment Solution (ACAS) and DISA STIG Viewer to scan and evaluate the security posture of Windows domain controllers, Citrix servers, and camera systems.
• Risk Mitigation Planning: Perform cyber-engineering analysis on End-of-Life (EOL) software components, recommending compensating controls or remediation pathways to the technical lead.
• Configuration & Change Advisory: Advise the systems engineering team on how proposed software updates and configuration changes will affect system accreditation and compliance.
• Artifact Generation: Develop and maintain critical cybersecurity artifacts, including the System Security Plan (SSP), Risk Assessment Report (RAR), and Plan of Action and Milestones (POA&M).

• Experience: 7+ years of practical experience in Cybersecurity Engineering, Assessment & Authorization (A&A), and RMF package development.
• Framework Mastery: Direct, expert working knowledge of the RMF process and specific experience implementing NIST SP 800-53 Rev 5 control sets.
• Tooling Experience: Proficiency with cybersecurity assessment tools, specifically DISA eMASS and ACAS (Tenable Nessus).
• Technical Environment Knowledge: Understanding of cybersecurity risks associated with Windows Active Directory, Citrix virtualization environments, and IoT/OT physical security equipment (cameras/DVRs).
• Clearance: Must be a U.S. Citizen possessing an active DoD Secret security clearance.
• Education: Bachelor’s degree in technical discipline or equivalent practical experience.

ills, education, and certifications. Watershed offers competitive compensation, medical and dental benefits, educational reimbursement, 401K plans with matching, 15 days of PTO to start and 11 paid holidays per year. The proposed salary range for this position is: $95,000.00 - $114,000.00 USD.

Watershed Security, is a Veteran Owned Small Business with over 20 years’ Cybersecurity and Government Contracting experience. Watershed is looking for an Information System Security Engineer (ISSE) for a six-month task in Jacksonville, FL, to coordinate the Assessment & Authorization (A&A) lifecycle for a PSS alarm monitoring system. The primary objective of this role is to drive the Risk Management Framework (RMF) re-authorization effort utilizing NIST SP 800-53 Rev 5 controls to secure an Authority to Operate (ATO). The ISSE will serve as the primary cybersecurity advisor to the systems team, analyzing the current environment (Windows, Citrix, DVR/Cameras) for compliance, addressing End-of-Life (EOL) software risks, and engineering security mitigations; onsite in Jacksonville, FL.