Information Systems Security Engineer

Information System Security Engineer

** Immediate Requirement**

** Remote work**

CSEngineering is seeking an experienced Information System Security Engineer to join our growing team! This position will support the Indian Health Service (IHS), Division of Information Security, under the M-21-31 Logging, Reporting and SSP Development Services effort.

The ideal candidate will bring strong expertise in Information System Security Officer (ISSO) support, Risk Management Framework (RMF), System Security Plan (SSP) development, and cybersecurity compliance. This role will focus on supporting NIST SP 800-53 Rev. 5 security controls, managing compliance documentation through RSA Archer, conducting security assessments, reviewing Plans of Action and Milestones (POA&Ms), and supporting Splunk-based logging and reporting operations.

This is a fully remote position with occasional travel (up to 10%) as required.

JOB RESPONSIBILITIES

• Develop, validate, update, and maintain System Security Plans (SSPs) in accordance with NIST SP 800-53 Rev. 5 requirements.
• Review and validate SSP documentation across assigned systems and maintain accurate compliance records.
• Serve as an Information Security Subject Matter Expert (SME) and provide guidance to System Owners on security control implementation and RMF requirements.
• Review POA&Ms, identify security control gaps, and recommend corrective actions and remediation strategies.
• Manage and update security controls, POA&Ms, supporting evidence, and compliance documentation within RSA Archer.
• Support system assessments, security risk assessments, internal and third-party audits, and vulnerability remediation activities.
• Evaluate system architectures and technology solutions to identify security vulnerabilities and recommend improvements.
• Assist System Owners with System Categorization Worksheets and security control implementation.
• Provide risk-based assessments and recommendations to the ISSO Lead and Federal HQ ISSO.
• Review vulnerability reports and coordinate with System Owners and Cybersecurity Incident Response teams on remediation activities.
• Configure, maintain, and manage Splunk M-21-31 logging packages and Splunk SIEM across EL1, EL2, and EL3 logging levels.
• Generate and maintain logging reports in support of OMB Memorandum M-21-31 and Executive Order 14028.
• Serve as a liaison between information security teams, System Owners, and other stakeholders to communicate security objectives and requirements.
• Provide technical recommendations, documentation, and reporting to support enterprise cybersecurity compliance and risk management initiatives.

REQUIRED QUALIFICATIONS

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Assurance, or a related engineering discipline.
• Minimum of 8 years of dedicated cybersecurity or information assurance experience.
• At least 5 years of hands-on experience with the NIST Risk Management Framework (RMF) and Assessment and Authorization (A&A) processes using NIST SP 800-53 Rev. 4/Rev. 5.

• Minimum of 2 years of hands-on experience using RSA Archer to manage security controls, POA&Ms, and compliance documentation.

• Demonstrated experience managing multiple System Security Plans (SSPs) concurrently, preferably across a large portfolio of systems.
• Strong experience advising non-technical System Owners on cybersecurity requirements, risk management, and security control implementation.
• Proficiency in Splunk, Splunk Enterprise, Splunk Security Enterprise, and Splunk User Behavior Analytics (UBA).
• CISSP or CISM certification required.
• Citizenship:
  Must be a U.S. Citizen.

Location: Remote (Candidate must be in the DC area)

PREFERRED CERTIFICATIONS

• Information Systems Security Engineering Professional (ISSEP).
• Certified in Risk and Information Systems Control (CRISC).
• CompTIA CASP+.
• At least 5 years of experience with Splunk Enterprise, Splunk Enterprise Security, and User Behavior Analytics (UBA).

ADDITIONAL REQUIREMENTS

• Experience supporting federal government cybersecurity programs is beneficial.
• Strong analytical, documentation, communication, and stakeholder management skills.
• Ability to manage multiple security compliance requirements and meet task-specific response timelines.

BACKGROUND AND SECURITY SCREENING

• Final candidates may be subject to employment verification, education verification, professional reference checks, criminal background screening, security clearance verification, and/or suitability review, as permitted by applicable federal, state, and local…