Information Systems Security Engineer
Core
Review and assess Risk Management Framework (RMF) authorization for classified information systems, including System Security Plans and Security Control Traceability Matrices, while ensuring compliance with Information Assurance directives.
Role type
Senior IC Information Systems Security Engineer
Builds
Classified information systems and security artifacts (SSP, SCTM, RARs)
Domain
Defense / Cybersecurity
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
NIST 800-53 Rev 4 implementation, Risk Management Framework (RMF), Information Assurance (IA) practices, Windows/Linux administration, virtualization, cloud security, threat/risk assessment, incident response support
Preferred skills
MS Active Directory, Splunk, ACAS/Nessus, McAfee, AWS Security, site visit assessments
Technologies
AWS, Active Directory, Cloud, Linux, Matrix, Security, Splunk, Windows, Azure, Support, Network, Web
Responsibilities
Review RMF authorization body of evidence for classified systems; Assess technical compliance with IA directives; Conduct threat and risk assessments; Provide inputs to security artifacts (POA&Ms, SCTM, RARs); Support Incident Response Team (IRT) activities