> Markdown version of [/jobs/ext/2846516-information-system-security-engineer](https://www.wearedevelopers.com/jobs/ext/2846516-information-system-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Information System Security Engineer

- **Company:** Watershed Security
- **Location:** Jacksonville, FL, United States
- **Experience:** Expert
- **Salary:** $95,000.0 - $114,000.0
- **Contract:** Permanent contract
- **Skills:** Active Directory, Systems Engineering, Citrix Systems, Windows Domain, Package Development Process, Virtualization Technology, Information Security Management System, Tenable Nessus, Plan of Action and Milestones
- **Published:** September 11, 2026
- **Apply:** https://www.thejobnetwork.com/job/38b8cd7e-85ca-4a20-abc1-1a9f06af019d/isse

## About the Role

* Experience: 7+ years of practical experience in Cybersecurity Engineering, Assessment & Authorization (A&A), and RMF package development.
 * Framework Mastery: Direct, expert working knowledge of the RMF process and specific experience implementing NIST SP 800-53 Rev 5 control sets.
 * Tooling Experience: Proficiency with cybersecurity assessment tools, specifically DISA eMASS and ACAS (Tenable Nessus).
 * Technical Environment Knowledge: Understanding of cybersecurity risks associated with Windows Active Directory, Citrix virtualization environments, and IoT/OT physical security equipment (cameras/DVRs).
 * Clearance: Must be a U.S. Citizen possessing an active DoD Secret security clearance.
 * Education: Bachelor's degree in technical discipline or equivalent practical experience.

## Description

* RMF Re-Authorization Leadership: Lead the development, analysis, and submission of the Authority to Operate (ATO) package via Navy eMASS in accordance with the Risk Management Framework (RMF).
 * NIST SP 800-53 Rev 5 Alignment: Select, tailor, and validate system security controls specifically mapping to the updated NIST SP 800-53 Rev 5 framework.
 * Vulnerability & EOL Assessment: Utilize Assured Compliance Assessment Solution (ACAS) and DISA STIG Viewer to scan and evaluate the security posture of Windows domain controllers, Citrix servers, and camera systems.
 * Risk Mitigation Planning: Perform cyber-engineering analysis on End-of-Life (EOL) software components, recommending compensating controls or remediation pathways to the technical lead.
 * Configuration & Change Advisory: Advise the systems engineering team on how proposed software updates and configuration changes will affect system accreditation and compliance.
 * Artifact Generation: Develop and maintain critical cybersecurity artifacts, including the System Security Plan (SSP), Risk Assessment Report (RAR), and Plan of Action and Milestones (POA&M).


## Related Videos

- [AI Vector Search at Scale - Ewa Szyszka - Ewa Szyszka](https://www.wearedevelopers.com/videos/2161-ai-vector-search-at-scale-ewa-szyszka-ewa-szyszka)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What is Agent Memory?  - William Lyon](https://www.wearedevelopers.com/videos/1846-what-is-agent-memory-william-lyon)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Maturity assessment for technicians or how I learned to love OWASP SAMM](https://www.wearedevelopers.com/videos/351-maturity-assessment-for-technicians-or-how-i-learned-to-love-owasp-samm)
- [Beyond Prompting: Building Scalable AI with Multi-Agent Systems and MCP](https://www.wearedevelopers.com/videos/1454-beyond-prompting-building-scalable-ai-with-multi-agent-systems-and-mcp)

## Related Articles

- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)