Information System Security Engineer
Core
Review and assess Risk Management Framework (RMF) authorization body of evidence for classified information systems, including System Security Plans and Security Control Traceability Matrices.
Role type
Senior IC Information System Security Engineer (RMF/Classified)
Builds
Security artifacts (SSP, SCTM, POA&Ms, RARs) and compliance assessments for US federal government systems.
Domain
US Federal Government / Defense & National Security / Information Assurance
Required skills
NIST 800-53 Rev 4 implementation, Risk Management Framework (RMF), Windows/Linux environments, virtualization, cloud environments, Splunk, incident response, security design review, threat/risk assessment
Preferred skills
ACAS/Nessus scanning, SIEM configuration and dashboarding, DevSecOps, system administration, forensics
Technologies
Splunk, NIST 800-53, RMF, Windows, Linux, Cloud, Virtualization, ACAS, Nessus
Responsibilities
Review new and existing systems for technical compliance with IA directives; Advise on in-depth security design review and threat/risk assessments; Provide inputs to technical artifacts including POA&Ms and SCTMs; Conduct site visits to inspect IA plans and support Incident Response Team activities
Seniority
Mid-Senior, hands-on IC