Information System Security Engineer IV

Summary

Information System Security Engineer IV – Huntsville, Alabama

Are you ready to enhance your skills and build your career in a rapidly evolving business climate? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you. Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level.

Chronos Operations (CO) is a wholly-owned subsidiary of Chenega Corporation, based in Anchorage, AK. Chronos is headquartered in Colorado Springs, CO, and provides mission-critical services in Advanced Analytics & AI, Software Engineering, Cybersecurity, Information Technology, and Intelligence.

The Information System Security Engineer IV acts as a senior technical lead for RMF activities, developing and maintaining security documentation, coordinating with AOs/AODRs, and ensuring compliance with cybersecurity regulations.

• Act as a senior technical lead for RMF activities, developing and maintaining security documentation, coordinating with AOs/AODRs, and ensuring compliance with cybersecurity policies and regulatory frameworks.
• Manage risk, secure IT systems, and implement security controls to protect sensitive data.
• Assist in the development and maintenance of RMF documentation and reports to achieve and maintain compliance with cybersecurity regulations and optimize processes to streamline the approval process across the AMC Enterprise Mission Assurance Support System (eMASS) Portfolio for HQ and Enterprise records.
• Implement a Continuous Monitoring Strategy with automation to keep packages current.
• Work with leadership, auditors, and IT teams to maintain security and respond to threats.
• Work in all steps of the RMF process with system owners, ISSO, and ISSMs to validate adequate security controls are in place for sound risk management decisions by the AO.
• Develop, implement, and enforce cybersecurity policies and procedures in accordance with regulatory frameworks. Manage all aspects of cybersecurity for systems maintained on-site.
• Brief senior management on all aspects of security engineering.
• Lead and support frequent interaction with government customers.
• Ensure security requirements are addressed in all phases of the system development lifecycle (SDLC).
• Participate in network design reviews and security testing for the customer’s networks.
• Coordinate with system development teams to ensure network security standards are followed and implemented correctly.
• Identify additional security requirements based on RMF or security issues that put the customer’s systems at risk.
• Review and analyze new systems (hardware and software) and provide recommendations concerning their security.
• Provide A&A and RMF guidance to system owners to ensure accreditation success.
• Provide insight and recommendations leading up to and during the customer’s information assurance readiness review process.
• Oversee the cybersecurity lifecycle from inception to completion.
• Develop, review, and update documentation to ensure RMF and Continuous Monitoring requirements.
• Maintain and update security documentation (SSPs, POA&Ms, etc.).
• Assist with the preparation of test plans and conduct security control testing in accordance with NIST SP 800-53.
• Direct and oversee daily activities of team members, ensuring tasks are completed accurately, efficiently, and in alignment with contract goals.
• Other duties as assigned.

• Bachelor's degree in science, technology, engineering, mathematics, IT, or business-related programs
• 8+ years of experience in information system security practices and applying the RMF to complex IT systems
• 5+ years’ experience supporting DoD or federal programs is highly desirable
• Experience with RMF (NIST 800-53), ATO packages, POA&M development, and system categorization is required
• Baseline and Full Computing Environment Certifications for IAT-II IAW DoD 8570.01-M (Security+ certification) desired
• Cybersecurity certifications like CISSP, CISA, or CISM are required
• Must have an active Secret clearance with the ability to obtain TS with SCI eligibility

• Experience with…