Senior Information Systems Security Engineer

Job Title: Senior Information Systems Security Engineer

Location: Peterson, SFB and Colorado Springs, CO SCIF (on-site)

Security Clearance: DoW Top Secret (SCI Eligibility)

We question. We listen. We adapt.

Be honest. Be pragmatic.

Omni Federal
, founded in 2017 and headquartered in Washington, DC, is a highly specialized software solutions provider with a robust presence in key locations across the United States, including Boston, MA, Colorado Springs, CO, San Antonio, TX, and St. Louis, MO. Born out of the Department of Defense s software factory ecosystem, Omni has rapidly distinguished itself by delivering both mission-critical and enterprise solutions that enhance the technological capabilities of the federal government.

With a focus on areas such as Command and Control, Cybersecurity, Space, Geospatial, and Modeling & Simulation, Omni leverages cutting-edge commercial technology tailored to government objectives, improving mission performance and delivering transformative outcomes for the Department of Defense (DoD), Intelligence Community (IC), and their end-users. The company s innovative approach is backed by its Omni Labs and SBIR Innovation centers, where they develop advanced platforms and tools indata mesh, secure connectivity, and intelligent automation.

Why Omni?

• Environment of Autonomy

• Innovative Commercial Approach

• People over process

We are seeking a strong Senior
Information Systems Security Engineer to support our Space portfolio. In this role you will support security analysis of operational and development environments, threats, vulnerabilities and internal interfaces to define and assess compliance with accepted industry and Government standards. Candidates must be passionate, energized, and excited to work on modern architectures and solve challenging problems for our clients.

Position Description (what you will do):

• Perform engineering-focused security analysis of operational and development environments, identifying threats, vulnerabilities, and internal interfaces in order to define and verify compliance with applicable industry and government standards.

• Support the design and implementation of the Assessment and Authorization (A&A) processes under the NIST Risk Management Framework (RMF) for the development and sustainment of secure information systems.

• Develop, implement, and refine audit mechanisms for systems to maintain the integrity of the security posture throughout the system s lifecycle.

• Leverage assessment methodologies, test results, and analysis outputs to ensure compliance with established security requirements, while identifying opportunities for system engineering enhancements.

• Perform and manage periodic hardware and software inventory assessments to ensure alignment with security engineering practices.

• Collaborate with government stakeholders, suppliers, and organizational teams to design, implement, and validate protective mechanisms that meet cybersecurity requirements, emphasizing clear communication and adherence to security engineering principles.

Requirements:

• 8 years of direct Cybersecurity experience with at least: 3 years applying RMF to support the design, development, and authorization of secure systems.

• 2 years conducting security engineering analysis to identify and mitigate threats, vulnerabilities, and risks in systems.

• 2 year implementing security controls and architectures in alignment with government and industry standards.

• 2 year performing vulnerability assessments and risk analysis to inform system design.

• 2 years supporting configuration management practices and conduct hardware/software inventory assessments.

• Must meet Requirements outlined in DoDM 8140 for System Security Engineer (633), i.e. Sec+, CISSP

Nice to Have:

• Proficiency with security compliance tools such as eMASS or Xacta for risk management and reporting.

• Collaborate with stakeholders, developers, and suppliers to integrate and validate security requirements.

• Experience with cybersecurity policies and implementation of Risk Management Framework (RMF): e.g., DAAPM, CNSSI 1253, ICD-503, JSIG, or NIST SP 800 series

• Experience in utilizing security-relevant tools such as ACAS, ESS, SCAP

Our…