Information System Security Engineer (ISSE)

• Support the full RMF lifecycle for classified systems
• Assist with A&A package development and Authority to Operate (ATO) maintenance
• Implement, assess, and validate security controls
• Perform Security Control Traceability and technical validation
• Support system boundary definition and security architecture documentation
• Develop and maintain RMF artifacts and body of evidence packages
• Conduct compliance and vulnerability scanning analysis
• Validate findings including false positive identification and remediation verification
• Support STIG implementation and configuration hardening
• Manage patch validation and security compliance efforts
• Participate in Continuous Monitoring (ConMon) activities

Clearance Required: Active TS/SCI with Full Scope Polygraph Certification Requirement: DoD 8570/8140 IASAE Level II Compliant Certification Required, * Active TS/SCI with Full Scope Polygraph security clearance

• U.S. Citizenship
• DoD 8570/8140 IASAE Level II compliant certification required
• Strong understanding of the Risk Management Framework (RMF)
• Experience supporting Assessment & Authorization (A&A) and Authority to Operate (ATO) processes
• Experience with security control implementation, validation, and continuous monitoring
• Familiarity with NIST SP 800-37 and NIST SP 800-53 (Rev. 3 and/or Rev. 5)
• Experience with RMF and cybersecurity tools such as:LATTEARTXACTABISCOTTIWATCHCATSTE
• Experience with compliance and configuration scanning tools
• Strong analytical, troubleshooting, and documentation skills